How to allow only registered users?

See: https://www.javascriptkit.com/howto/htaccess3.shtml

Thank you but in this case there’s going to be over 30 people publishing and commenting blogs and who knows how often we are going to need to be adding and deleting users so the validations definitely has to be on the software side and not on the server (Apache in this case). Besides the idea is to use the lists of users registered and stored in the mysql weblog database using theirs password, etc.

Ok…how about one of the two plugins listed here:

https://www.ads-software.com/support/topic/39516

Thank you. I’m using the registered-only.php pluggin by Carthik Sharma and so far it works just fine.

I am also looking for something like what has been described here. I think the user authentication scheme in WordPress is pretty robust therefore worth making use of. For all WP site first of all index.php is run first. When someone wants to login then wp-login.php is run. How about having wp-login script put ahead of anything else in index.php, i.e. users are forced to login before the necessary html codes are written….? I’m no php coder, just an idea.

Rename your index.php to index_old.php. Then rename wp-login.php as index.php. Now everybody will have to login to see anything.

Thanks htpeng, I’ll sure try that on an experimental site. Looks like you have also built something for your fellow classmates. I recorded my failed experiment here https://www.me.sfong.net/

Without looking into the codes, I thought index.php is called whenever someone click “home” at the site therefore if it’s renamed would other changes be required elsewhere?

htpeng, it didn’t quite work. When I type in username/pwd and click “log-in” it calls wp-login.php which isn’t there because it has been renamed? What am I missing?

htpeng suggested renaming index.php and rename wp-login.php as index.php (BTW, sfong15’s concern could be fixed by leaving the wp-login.php file named both ways – 2 copies). These ideas provide an escorted approach to the WordPress environment, but can’t anybody still manually load any page in the WordPress file directory? (Knowing the names of all the files there is pretty trivial because they’re the same in each installation, even if you can’t see a listing of the files.)

I’m looking for just this…I know this is an old thread, but what was the solution?

I found it.. here: https://blog.taragana.com/index.php/archive/angsumans-authenticated-wordpress-plugin-password-protection-for-your-wordpress-blog/