CountryLock

CountryLock provides a simple, lightweight way to allow or block countries from accessing your WordPress site.

It’s designed to be « set it and forget it » with no upsells, ads, or complex configurations.

✨ Key Features

• Master Toggle: Enable or disable the firewall with a single click.
• Allowed Countries List: Specify which two-letter country codes (e.g., US, CA) are allowed. Everyone else is blocked.
• Admin Bypass: Logged-in administrators can always bypass the block (toggleable).
• IP Allowlist: A simple list of IPs or CIDR ranges (like 123.45.67.89 or 10.0.0.0/8) that are always allowed.
• Block Logging: See which countries and IPs are being blocked (toggleable).
• Zero-Lookup Detection: Automatically uses Cloudflare (HTTP_CF_IPCOUNTRY) and other common server-level GEO headers for instant decisions with zero performance impact.
• Remote Lookup: As a fallback, it can query an external service (ipapi.co) if no headers are found.

External Services

This plugin uses one external service as a fallback to determine a visitor’s country if no local GEO headers (like those from Cloudflare or a server-level GeoIP module) are present.

• Service: ipapi.co
• What it’s used for: To look up the country of origin for a visitor’s IP address.
• Data Sent: The visitor’s IP address is sent to the service. This happens only if the « Use remote lookup if no geo headers » setting is enabled AND no local GeoIP headers are detected.
• Service Policies:
  • Terms of Service
  • Privacy Policy