How may I set the portal as the front page of the site?
Hello community, I couldn't find my answer in the docs. I've set my community to private only. I'd like to set my Wordpress frontpage to the portal. If a non-logged in user comes to the page, a login or register page is shown. If the user is logged in, she/he goes right to the /portal page to see the "regular" page. I didn't see a shortcode or method for making this happen. Or, is there a better way to show a page to the public (log in or register page) and an approved, logged in user? Your help would be appreciated. Thank you 😀
Loren Strand try completly free FluentAuth plugin where you can have shortcodes for the login form and you insert the code (login/registration) in to your WP starting page. Once your users are logged in the are being redirected to the/portal url.
Then you can change the login url in fCommunity settings to your root/apex domain where your users will see the login form.
Mat Thank you so much Mat. I didn't know FluentAuth existed. I will study it and the video. Also, if I use WordFence (free version), how might that conflict with FluentAuth? I'm interested if you have suggestions on what are wise and non-conflicting security plugins/practices to secure a FluentCommunity site, please. 😀
Loren Strand FluentAuth plugin is responsible for the login process and you can enable 2FA per user role if needed.
Wordfence (I dont use) plugin might help you out to monitor some WP activities.
Mat Upon reflection, does FluentAuth replace WordFence? Or may the two run in tandem? Or some better combination? It's not that my site has high security concerns, simply that I am careful given the bots and such "regular, unskilled" attacks.
Loren Strand for security you should try to avoid WP users listing (especially for not logged in users) or users enumeration so it is harder to get users login and use phising against users (Bruteforce method might be less efficient).
Make sure you change the default message for the login form (so it doesn't show if the email only is incorrect). Example snippet:
// Login Error message
function dorzki_change_failed_login_message() {
return esc_html__( 'Incorrect credentials provided.', 'dorzki' );
}add_filter( 'login_errors', 'dorzki_change_failed_login_message' );
If possible use 2FA for users authentication with elevated permissions (Admin). Make sure to force SSL connection (in wp-config define('FORCE_SSL_ADMIN', true); or use some redir rules in .htaccess)
Now.. if you have your users secured then avoid outdated or nulled plugins/themes.
If you like light plugins maybe you can try: BBQ Pro and Blackhole Pro unless Wordfence do the job for you.
Less plugins means better security sometimes.
External backups are obligatory so you can restore your service fast.
The rest is a history.
If you are geeky you can try to implement security headers (but don't break your WP)
Mat Thanks for the suggestions. I'm not as sophisticated as I view you are. I get some of what you wrote. I will keep learning.
Loren Strand I am pretty sure you read a lot of suggestions already but here you have something to read - not all suggestions are good but it is always nice to be aware what is possible.
Don't forget to try WP SCAN or similar tools if you like fun and you are ready for it
Ref: link