Adds IP address blocking for your site and your login page, and fixes a security problem where a visitor could fake their location using request headers. If your site is behind a CDN or proxy, check the detected address on the settings screen after updating.<\/p>","1.1.0":"
This update upgrades the internal API to v3. Existing plan types (Standard, Advanced, Security) will be automatically migrated to Paid Plan. No action required.<\/p>","1.0.0":"
Initial release.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3434235,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3434235,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3434375,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3434405,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.0","1.1.0","1.2.0"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3432526,"resolution":"1","location":"assets","locale":"","width":1560,"height":908},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3432526,"resolution":"2","location":"assets","locale":"","width":1466,"height":804},"screenshot-3.png":{"filename":"screenshot-3.png","revision":3432526,"resolution":"3","location":"assets","locale":"","width":1543,"height":303},"screenshot-4.png":{"filename":"screenshot-4.png","revision":3432526,"resolution":"4","location":"assets","locale":"","width":1404,"height":533},"screenshot-5.png":{"filename":"screenshot-5.png","revision":3679076,"resolution":"5","location":"assets","locale":"","width":1631,"height":916}},"screenshots":{"1":"Country redirect rules settings","2":"Redirect confirmation popup","3":"Country access control settings","4":"Conditional content shortcodes","5":"IP access control, showing your own address and the two access questions"}},"plugin_section":[],"plugin_tags":[1912,172575,32023,4124,1192],"plugin_category":[49],"plugin_contributors":[253323],"plugin_business_model":[],"class_list":["post-271057","plugin","type-plugin","status-publish","hentry","plugin_tags-access-control","plugin_tags-country-blocking","plugin_tags-geo-redirect","plugin_tags-geolocation","plugin_tags-ip-blocking","plugin_category-maps-and-location","plugin_contributors-ipgeolocation","plugin_committers-ipgeolocation"],"banners":{"banner":"https:\/\/ps.w.org\/ipgeolocation-geo-redirects-content-control\/assets\/banner-772x250.png?rev=3434405","banner_2x":"https:\/\/ps.w.org\/ipgeolocation-geo-redirects-content-control\/assets\/banner-1544x500.png?rev=3434375","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/ipgeolocation-geo-redirects-content-control\/assets\/icon-128x128.png?rev=3434235","icon_2x":"https:\/\/ps.w.org\/ipgeolocation-geo-redirects-content-control\/assets\/icon-256x256.png?rev=3434235","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/ipgeolocation-geo-redirects-content-control\/assets\/screenshot-1.png?rev=3432526","caption":"Country redirect rules settings"},{"src":"https:\/\/ps.w.org\/ipgeolocation-geo-redirects-content-control\/assets\/screenshot-2.png?rev=3432526","caption":"Redirect confirmation popup"},{"src":"https:\/\/ps.w.org\/ipgeolocation-geo-redirects-content-control\/assets\/screenshot-3.png?rev=3432526","caption":"Country access control settings"},{"src":"https:\/\/ps.w.org\/ipgeolocation-geo-redirects-content-control\/assets\/screenshot-4.png?rev=3432526","caption":"Conditional content shortcodes"},{"src":"https:\/\/ps.w.org\/ipgeolocation-geo-redirects-content-control\/assets\/screenshot-5.png?rev=3679076","caption":"IP access control, showing your own address and the two access questions"}],"raw_content":"\n
IPGeolocation.io \u2013 Geo Redirects & Content Control<\/strong> decides what each visitor sees based on where they are and what IP address they are using.<\/p>\n\n You can send people from one country to a different page, keep unwanted IP addresses away from your site or your login page, and show or hide parts of a page depending on the visitor's location. Everything is set up from one settings screen, and you do not need to write any code.<\/p>\n\n The plugin uses the ipgeolocation.io API<\/strong> to work out a visitor's country and other details. Results are stored for 24 hours per address, so your site stays fast.<\/p>\n\n The IP section asks two questions, and you answer them separately:<\/p>\n\n For each one, you can leave it open to everyone, block a list of addresses, or allow only a list of addresses. Locking the login page to your office address is a simple way to stop password guessing bots, and ordinary visitors are not affected at all.<\/p>\n\n IP rules are checked before any location lookup, so blocking somebody uses none of your API credits.<\/p>\n\n The plugin supports the following API plans from ipgeolocation.io:<\/p>\n\n Additional security-related features are available for paid plans only.<\/p>\n\n Blocking by IP address does not need an API key. Everything based on country does.<\/p>\n\n Available fields include:\n ip, city, state, country, country_code, zipcode, continent, latitude, longitude, currency, calling_code, languages, is_proxy, is_tor, is_anonymous, cloud_provider<\/p>\n\n Supported attributes: country, country_code, state, city, continent, is_proxy, is_tor, is_cloud_provider, is_anonymous, logic (AND \/ OR)<\/p>\n\n Both shortcodes accept the same attributes, so you can hide content from one country just as easily as showing it to another.<\/p>\n\n For testing or user control, redirects can be bypassed:<\/p>\n\n This does not affect IP rules.<\/p>\n\n This plugin connects to two outside services.<\/p>\n\n ipgeolocation.io<\/strong><\/p>\n\n Used to find the country, region, city and security details for a visitor's IP address. This powers country redirects, country access control and the shortcodes.<\/p>\n\n The visitor's IP address and your API key are sent to An API key is required. You can get one by creating a free or paid account at ipgeolocation.io<\/a>. Without it, the country-based features will not work.<\/p>\n\n Terms of service: https:\/\/ipgeolocation.io\/tos.html<\/a>\nPrivacy policy: https:\/\/ipgeolocation.io\/privacy.html<\/a><\/p>\n\n Cloudflare<\/strong><\/p>\n\n Used only to keep an up-to-date list of Cloudflare server addresses. The plugin needs this list to tell whether a Cloudflare header can be trusted. Without it, that header could be faked by anyone.<\/p>\n\n Once a day the plugin requests Terms of service: https:\/\/www.cloudflare.com\/website-terms\/<\/a>\nPrivacy policy: https:\/\/www.cloudflare.com\/privacypolicy\/<\/a><\/p>\n\n This plugin is licensed under the GPL v2 or later.<\/p>\n\n\n No. Administrators are automatically excluded from redirects, and by default they are never blocked by IP rules either. You can change that in Advanced settings.<\/p><\/dd>\n Known bots (Google, Bing, Facebook, X and others) are excluded from country redirects. IP rules do not skip them, because any browser can claim to be a search engine. To exempt a crawler from an IP rule, add its addresses to your safe list.<\/p><\/dd>\n Yes. IP data is cached for 24 hours per IP.<\/p><\/dd>\n Yes. Choose the Cloudflare option under Advanced settings. The plugin only trusts Cloudflare's headers when the request genuinely came from a Cloudflare server, so nobody can pretend to be at a different address.<\/p><\/dd>\n No. API results are cached, and IP rules are a simple local check with no lookup involved.<\/p><\/dd>\n No. Blocking by IP address works without a key. Country features need one.<\/p><\/dd>\n The settings screen shows it at the top of the IP section, with a button that adds it to your safe list.<\/p><\/dd>\n Your site is probably behind a CDN or proxy, which replaces the address your server sees. Open Advanced settings and choose the option that matches your setup, then check the address again after saving.<\/p><\/dd>\n Add this line to your wp-config.php file, log in, fix the rule, then remove the line:<\/p>\n\n The plugin normally refuses to save a rule that would lock you out, so this should be rare.<\/p><\/dd>\n Mostly. Logged-in visitors and uncached requests are handled normally. A page already saved as a cached file may still be served, because that happens before this plugin runs. Exclude any page that must always be checked.<\/p><\/dd>\n\n<\/dl>\n\n\nMain Features<\/h3>\n\n
\n
Blocking Visitors By IP Address<\/h3>\n\n
\n
Configuration<\/h3>\n\n
\n
Shortcodes<\/h3>\n\n
Display Single Geolocation Field<\/h3>\n\n
[ipgeo country]\n[ipgeo city]\n[ipgeo country_code]\n<\/code><\/pre>\n\nConditional Content (Show If Match)<\/h3>\n\n
[ipgeo_if country_code=\"US,CA\" logic=\"OR\"]Visible to visitors from the US or Canada.[\/ipgeo_if]\n<\/code><\/pre>\n\nConditional Content (Hide If Match)<\/h3>\n\n
[ipgeo_if_not country=\"Germany\"]Hidden from visitors in Germany.[\/ipgeo_if_not]\n<\/code><\/pre>\n\nRedirect Bypass<\/h3>\n\n
\n
?geo_bypass=1<\/code> bypasses redirects for 30 days<\/li>\n?geo_reset=1<\/code> resets the bypass cookie<\/li>\n<\/ul>\n\nExternal Services Used<\/h3>\n\n
https:\/\/api.ipgeolocation.io\/v3\/ipgeo<\/code> when a page needs location data. Results are stored for 24 hours per address, so a returning visitor does not cause a second request. Nothing is sent if you have not entered an API key, and nothing is sent for a visitor already blocked by an IP rule.<\/p>\n\nhttps:\/\/www.cloudflare.com\/ips-v4<\/code> and https:\/\/www.cloudflare.com\/ips-v6<\/code>. No visitor information, site information or personal data is sent. If the request fails, a copy included with the plugin is used instead. This only happens when address detection is set to Automatic or Cloudflare.<\/p>\n\nLicense<\/h3>\n\n
\n
\/wp-content\/plugins\/<\/code>.<\/li>\n\n
Does this plugin redirect logged-in administrators?<\/h3><\/dt>\n
Are bots and search engines redirected?<\/h3><\/dt>\n
Does the plugin cache API responses?<\/h3><\/dt>\n
Does it work with Cloudflare?<\/h3><\/dt>\n
Will this slow down my site?<\/h3><\/dt>\n
Do I need an API key to block IP addresses?<\/h3><\/dt>\n
How do I find my own IP address?<\/h3><\/dt>\n
The plugin shows the wrong IP address for me. Why?<\/h3><\/dt>\n
I locked myself out of my login page. How do I get back in?<\/h3><\/dt>\n
define( 'IPGEO_DISABLE_IP_ACCESS', true );\n<\/code><\/pre>\n\nDoes it work with a caching plugin?<\/h3><\/dt>\n
1.2.0<\/h4>\n\n
\n
1.1.0<\/h4>\n\n
\n
1.0.0<\/h4>\n\n
\n