Summary
- NEW Custom firewall rules
- NEW Disable XML-RPC Authenticated Methods
- NEW Blocked IPs & Blocked Countries
- New UI for Selecting Countries
- NEW Current IP in the List of Allowed IPs
- JavaScript Updates – Decouple the Plugin from the jQuery Library
- PHP 8 compatibility updates
- Additional support for the PRO version that could include more firewall rules and IP and country simulation
- Tested up to 5.6.1
You can download the free plugin from the WordPress repository. If you would like to support my work, please leave a 5 stars rating, or share this plugin on your feed.
A huge thanks in advance!
Custom firewall rules
The login filter can be configured to work in a different way, depending on what type of rules to be assessed and in which order.
The current types of rules are:
- Allow login only for allowed countries or allowed IPs
- Block login only for blocked countries or blocked IPs
- PRO Allow login only for allowed countries or allowed IPs, but not from blocked IPs
- PRO Allow login only for allowed countries or allowed IPs, but not from blocked IPs or blocked countries
- PRO Block login only for blocked countries or blocked IPs, but not for allowed IPs
- PRO Block login only for blocked countries or blocked IPs, but not for allowed IPs or allowed countries

Disable XML-RPC Authenticated Methods
This new option controls whether XML-RPC methods requiring authentication (such as for publishing purposes) are enabled or not. This option does not interfere with pingbacks or other custom endpoints that don’t require authentication. There are 3 options:
- Default – this will not change the current filter in your site
- Disable all – this will disable these for everyone
- Disable only when matching a restriction rule
Blocked IPs & Blocked Countries
Starting with this version, the plugin has new options for blocking specific IPs and countries.

New UI for Selecting Countries
The UI for selecting and blocking countries has been updated to allow to do this in a much easier way.

Current IP in the List of Allowed IPs
The current IP is added automatically to the list of allowed IPs if you are using IP restrictions. This decreases the chances you will block your own access.
JavaScript Updates – Decouple the Plugin from the jQuery Library
The code has been prepared for compatibility with future versions of WordPress core and it does not require jQuery library anymore, it was changed to vanilla JavaScript.
Login IP & Country Restriction – PRO Version
In version 6.0 I added support for some new cool premium options.
The PRO version of the plugins allows for tightening, even more, your WordPress website security, as it introduces some new rules you can use to filter the users’ access on your website and online shops. See all the details.