WP Manifestindependent plugin directory
manifest / privacy / how-old-are-you

How Old Are You

A WordPress plugin for age control of visitors

by Farzad Zarasvand · github.com/farzad1120/how-old-are-you · website

★ 0stars
v1.0.0latest · 6mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/farzad1120/how-old-are-you/archive/refs/heads/main.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/farzad1120/how-old-are-you ↗

A focused, production-ready age-verification plugin for WordPress. Blocks the public frontend behind a customizable verification gate; remembers verified visitors via a signed cookie.

Features

  • Two verification modes — date of birth (age computed in the site timezone) or "I am over X" confirmation. Admin-selectable.
  • Signed cookie — payload|expiry|hmac_sha256(secret=wp_salt('auth')). Tampered or expired values fail verification, so a visitor cannot forge a pass via browser dev tools.
  • No cookie on failure — under-age visitors cannot refresh their way past the gate.
  • Standalone gate document — the page body never reaches an unverified visitor, not even via "view source".
  • Frontend-only — wp-admin, wp-login.php, REST, AJAX, cron, XML-RPC, robots/feeds, and any non-GET requests always bypass the gate. Plus admin-configurable path-prefix exclusions.
  • Fully themable — colors via the WP color picker, logo via the media library, opacity slider, custom CSS, custom strings (with {age} interpolation).
  • Translation-ready — every user-facing string is i18n-ready; .pot template ships in languages/.
  • Multisite-aware — uninstall cleans options across the network.
  • Quality-gated — WordPress Coding Standards (PHPCS), unit + integration tests (PHPUnit), GitHub Actions and GitLab CI on PHP 7.4 / 8.1 / 8.3.

Quick start

  1. Drop the plugin into wp-content/plugins/how-old-are-you/.
  2. Activate it from Plugins → Installed Plugins.
  3. Visit Settings → Age Verification to configure.

Configuration

Every setting is in Settings → Age Verification. See docs/CONFIGURATION.md for the full reference.

Group Settings
Behavior enable, minimum age, verification mode
Cookie name, lifetime (days), SameSite
Messages heading, body, DOB label, yes/no labels, submit label, rejection heading + body
Appearance logo, background color, overlay opacity, panel/text/accent colors, custom CSS
Exclusions path prefixes to bypass

Development

This repo ships a Docker dev environment so you don't need PHP locally. See docs/DEV_ENVIRONMENT.md.

# Spin up WordPress 6.5 + MariaDB 11
docker compose -f docker-compose.dev.yml up -d
# → http://localhost:8080

# Install dev deps
docker run --rm -v "$PWD":/app -w /app composer:2 install

# Lint
docker run --rm -v "$PWD":/app -w /app composer:2 run lint

# Test
docker run --rm -v "$PWD":/app -w /app composer:2 run test

Hooks reference

See docs/DEVELOPER.md. Quick summary:

Hook Type Purpose
hoay_should_gate filter (bool) Final say on whether the gate renders.
hoay_excluded_paths filter (string[]) Modify the list of bypassed path prefixes.
hoay_verification_result filter (array) Mutate the AJAX response.
hoay_cookie_args filter (array) Adjust cookie flags before setcookie().

Themes can override the modal markup by placing how-old-are-you/modal.php in the active theme.

Security

See docs/SECURITY.md for the threat model and reporting guidance.

License

GPL-2.0-or-later. See LICENSE.

Releases

1 release.

Tag
Published
v1.0.0 latest
Apr 25, 2026 6mo ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.