WP Manifestindependent plugin directory
manifest / security / skyline-lockdown

SkyLineWP – Lock Down Everything

Only user ID 1 can manage plugins (incl. MU-plugins), install/update/delete/switch themes, use the customiser, access tools or edit files, or modify via REST API. Everyone else is redirected and stripped of the related caps and menu items.

by Dom · github.com/dompl/skyline-lockdown

★ 0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/dompl/skyline-lockdown/archive/refs/heads/master.zip

Readme

SkylineWP – Lock Down Everything

Version: 1.5.0
Author: Dom
License: GPLv2+

Only user ID 1 can:

  • Manage plugins (including MU-plugins)
  • Install, update, delete or switch themes
  • Use the Customiser or edit theme options
  • Access Tools (import, export, site-health)
  • Use the file editors (core, plugin or theme editors)
  • Make non-GET/HEAD REST API requests

All other users are redirected to the dashboard and have those capabilities stripped.

Installation

  1. Copy the skyline-lockdown.php file into a folder named skyline-lockdown inside your wp-content/mu-plugins/ (or wp-content/plugins/) directory.
  2. If in wp-content/plugins/, activate it in Plugins → Installed Plugins.
  3. Ensure your site is running PHP 7.4+ and WP 5.5+.

Changelog

See CHANGELOG.md.

Development & Versioning

This plugin uses Semantic Versioning.
After you bump the version in the plugin header (in skyline-lockdown.php), update CHANGELOG.md, then:

git add skyline-lockdown.php CHANGELOG.md
git commit -m "Release v1.X.X"
git tag -a vX.X.X -m "Version X.X.X"
git push origin main --tags

Replace main with your default branch, and update the remote URL as needed:

git remote add origin git@github.com:yourusername/skyline-lockdown.git

Read the full README on GitHub →