Restrict Admin Login by Country – GRC

This plugin protects your WordPress login area by restricting access to specific countries based on geolocation. It is especially useful for hardening security for roles such as administrator, shop manager, editor, and author.

Features:

• Restricts logins for admin, shop manager, editor, and author roles based on IP geolocation.
• Automatically whitelists the country where the plugin was first activated.
• Settings page to manually select allowed countries.
• Dynamically fetches a list of countries via a public API.
• Lightweight and easy to configure.

Powered by ipinfo.io for IP geolocation detection.

External Services

This plugin relies on two external services to function properly. These services are used to identify user locations and provide country data for configuration purposes.

1. ipinfo.io

What is the service used for? – Used to determine the geolocation (specifically, the country) of an IP address attempting to log in. – Ensures that only users from allowed countries can log in as administrator, shop manager, editor, or author.

What data is sent and when? – The plugin sends the IP address of the user attempting to log in to ipinfo.io at the time of login. – This is done in real time to determine the user’s country and enforce access rules.

Service Provider: – Website: https://ipinfo.io – Terms of Service: https://ipinfo.io/terms – Privacy Policy: https://ipinfo.io/privacy-policy

2. restcountries.com

What is the service used for? – Used to dynamically fetch the list of countries (with country codes and names) displayed in the plugin settings. – Allows users to easily select which countries should be allowed for admin login access.

What data is sent and when? – No user data is sent. – The plugin performs a GET request to https://restcountries.com/v3.1/all?fields=cca2,name to fetch a list of country codes and names during plugin settings initialization.

Service Provider: – Website: https://restcountries.com – API Documentation: https://restcountries.com/#api-endpoints-v3-all – No specific privacy policy is published, as this is a public API that does not handle user-specific data.

License

This plugin is licensed under the GPLv2 or later. See https://www.gnu.org/licenses/gpl-2.0.html for details.