WP Manifestindependent plugin directory
manifest / security / hdm-marketing-security

HDM Marketing Security

A security plugin for HDM Marketing to manage theme and plugin access

by Mohsen Hashempour · github.com/drlaravel/hdm-marketing-security · website

★ 0stars
0forks

Install

No release zip yet. The repository archive installs, but the folder name will carry the branch suffix and updates will not flow:

wp plugin install https://github.com/drlaravel/hdm-marketing-security/archive/refs/heads/main.zip
Readme github.com/drlaravel/hdm-marketing-security ↗

A security plugin for HDM Marketing to manage themes, plugins, and user roles with enhanced access control and Persian language support.

Description

HDM Marketing Security is a WordPress plugin designed for HDM Marketing to prevent unauthorized changes to themes and plugins, ensuring the stability of client websites. It introduces a custom "HDM Admin" role with exclusive permissions to manage themes, plugins, and specific user roles. The plugin restricts default Administrators from modifying themes, plugins, or viewing/editing HDM Admin users, while allowing them to manage other users. All user-facing messages are in Persian for a localized experience.

Key Features

  • Custom "HDM Admin" role with elevated permissions
  • Restricts theme and plugin management to HDM Admins only
  • Hides HDM Admin users from default Administrators in the user list
  • Prevents default Administrators from editing or deleting HDM Admin users
  • Persian language support for all admin interface messages
  • Secure access control with nonce verification and capability checks
  • Modular architecture for maintainability and scalability

This plugin is ideal for website design companies like HDM Marketing that need to protect client sites from unintended modifications while maintaining robust user management capabilities.

Installation

  1. Upload the hdm-marketing-security folder to the /wp-content/plugins/ directory.
  2. Activate the plugin through the 'Plugins' menu in WordPress.
  3. Upon activation, the user activating the plugin is automatically assigned the "HDM Admin" role.
  4. Navigate to the "HDM" menu in the WordPress admin panel to manage themes, plugins, and roles.

Usage

  1. Role Management:

    • Access the "HDM > Roles" menu to assign or remove the "HDM Admin" role for users.
    • Only HDM Admins can see and manage other HDM Admin users.
    • Default Administrators cannot view or modify HDM Admin users.

  2. Theme Management:

    • Use the "HDM > Themes" menu to activate available themes.
    • Only HDM Admins can access this menu.

  3. Plugin Management:

    • Use the "HDM > Plugins" menu to activate or deactivate plugins.
    • Only HDM Admins can access this menu.

  4. Security Features:

    • Default Administrators cannot access the standard WordPress Themes or Plugins menus.
    • Attempts to edit HDM Admin users by non-HDM Admins result in a Persian error message: "شما اجازه ویرایش یا حذف کاربران مدیر اچ دی ام را ندارید."

Frequently Asked Questions

Who can manage themes and plugins?

Only users with the "HDM Admin" role can manage themes and plugins through the HDM menu.

Can default Administrators manage users?

Yes, default Administrators can manage non-HDM Admin users via the standard Users menu. HDM Admin users are hidden from their view and cannot be edited or deleted.

Why are messages in Persian?

The plugin is designed for HDM Marketing’s Persian-speaking clients, ensuring a localized user experience.

What happens if a non-HDM Admin tries to access restricted pages?

They will see an access denied message in Persian, such as "شما اجازه دسترسی به این صفحه را ندارید."

Screenshots

  1. HDM Admin Dashboard: Overview of the HDM Settings page.
  2. Theme Management: Interface for activating themes.
  3. Plugin Management: Interface for activating/deactivating plugins.
  4. Role Management: Interface for assigning/removing the HDM Admin role.

Changelog

1.1.0

  • Added role management interface for assigning/removing HDM Admin role.
  • Automatically assign HDM Admin role to the user activating the plugin.
  • Enhanced security to prevent default Administrators from seeing or modifying HDM Admin users.
  • Improved feedback with Persian success/error messages.

1.0.0

  • Initial release with theme and plugin management, custom HDM Admin role, and Persian language support.

Upgrade Notice

1.1.0

This update adds a role management interface and enhances security by hiding HDM Admin users from default Administrators. Update to ensure proper access control and user management.# HDM Marketing Security

Contributors: HDM Marketing
Tags: security, theme management, plugin management, role management, access control
Requires at least: 5.0
Tested up to: 6.6
Stable tag: 1.1.0
Requires PHP: 7.4
License: GPLv2 or later
License URI: http://www.gnu.org/licenses/gpl-2.0.html

A security plugin for HDM Marketing to manage themes, plugins, and user roles with enhanced access control and Persian language support.

Description

HDM Marketing Security is a WordPress plugin designed for HDM Marketing to prevent unauthorized changes to themes and plugins, ensuring the stability of client websites. It introduces a custom "HDM Admin" role with exclusive permissions to manage themes, plugins, and specific user roles. The plugin restricts default Administrators from modifying themes, plugins, or viewing/editing HDM Admin users, while allowing them to manage other users. All user-facing messages are in Persian for a localized experience.

Key Features

  • Custom "HDM Admin" role with elevated permissions
  • Restricts theme and plugin management to HDM Admins only
  • Hides HDM Admin users from default Administrators in the user list
  • Prevents default Administrators from editing or deleting HDM Admin users
  • Persian language support for all admin interface messages
  • Secure access control with nonce verification and capability checks
  • Modular architecture for maintainability and scalability

This plugin is ideal for website design companies like HDM Marketing that need to protect client sites from unintended modifications while maintaining robust user management capabilities.

Installation

  1. Upload the hdm-marketing-security folder to the /wp-content/plugins/ directory.
  2. Activate the plugin through the 'Plugins' menu in WordPress.
  3. Upon activation, the user activating the plugin is automatically assigned the "HDM Admin" role.
  4. Navigate to the "HDM" menu in the WordPress admin panel to manage themes, plugins, and roles.

Usage

  1. Role Management:

    • Access the "HDM > Roles" menu to assign or remove the "HDM Admin" role for users.
    • Only HDM Admins can see and manage other HDM Admin users.
    • Default Administrators cannot view or modify HDM Admin users.

  2. Theme Management:

    • Use the "HDM > Themes" menu to activate available themes.
    • Only HDM Admins can access this menu.

  3. Plugin Management:

    • Use the "HDM > Plugins" menu to activate or deactivate plugins.
    • Only HDM Admins can access this menu.

  4. Security Features:

    • Default Administrators cannot access the standard WordPress Themes or Plugins menus.
    • Attempts to edit HDM Admin users by non-HDM Admins result in a Persian error message: "شما اجازه ویرایش یا حذف کاربران مدیر اچ دی ام را ندارید."

Frequently Asked Questions

Who can manage themes and plugins?

Only users with the "HDM Admin" role can manage themes and plugins through the HDM menu.

Can default Administrators manage users?

Yes, default Administrators can manage non-HDM Admin users via the standard Users menu. HDM Admin users are hidden from their view and cannot be edited or deleted.

Why are messages in Persian?

The plugin is designed for HDM Marketing’s Persian-speaking clients, ensuring a localized user experience.

What happens if a non-HDM Admin tries to access restricted pages?

They will see an access denied message in Persian, such as "شما اجازه دسترسی به این صفحه را ندارید."

Screenshots

  1. HDM Admin Dashboard: Overview of the HDM Settings page.
  2. Theme Management: Interface for activating themes.
  3. Plugin Management: Interface for activating/deactivating plugins.
  4. Role Management: Interface for assigning/removing the HDM Admin role.

Changelog

1.1.0

  • Added role management interface for assigning/removing HDM Admin role.
  • Automatically assign HDM Admin role to the user activating the plugin.
  • Enhanced security to prevent default Administrators from seeing or modifying HDM Admin users.
  • Improved feedback with Persian success/error messages.

1.0.0

  • Initial release with theme and plugin management, custom HDM Admin role, and Persian language support.

Upgrade Notice

1.1.0

This update adds a role management interface and enhances security by hiding HDM Admin users from default Administrators. Update to ensure proper access control and user management.