Not while you are logged in: administrators are always exempt from all three rules. Only the login<\/em> rule can affect you when you are logged out and your own country is on its list \u2014 the settings page warns you about exactly that.<\/p><\/dd>\nMy site runs behind Cloudflare or another proxy \u2014 the detected country is wrong.<\/h3><\/dt>\nBehind a proxy, REMOTE_ADDR<\/code> is the proxy's address, not the visitor's. Use the wonderful_geoblocking_countries_client_ip<\/code> filter to supply the real client IP from a header you trust, or short-circuit the lookup entirely with wonderful_geoblocking_countries_pre_country_code<\/code> (e.g. return the value of Cloudflare's CF-IPCountry<\/code> header).<\/p><\/dd>\nDoes blocking also apply to the REST API and feeds?<\/h3><\/dt>\nThe site access<\/em> rule runs on every frontend request, including feeds and the REST API. The WordPress admin (including admin-ajax) and wp-login.php are excluded from it.<\/p><\/dd>\nHow does VPN blocking work, and how reliable is it?<\/h3><\/dt>\nTick VPN list<\/em> under Databases<\/em> and download it, then tick VPN<\/em> in every area where VPN users should be blocked. A visitor whose IP lies in a range of a known VPN provider is then blocked \u2014 regardless of the country and even in allow-list mode (otherwise a VPN server in an allowed country would be a way in).<\/p>\n\nThe X4BNet list covers the IP ranges of the common commercial VPN providers and is updated daily. No free list catches every VPN, though: small or self-hosted VPNs, Tor and residential proxies are usually not included. Logged-in administrators are never blocked, VPN or not.<\/p><\/dd>\n
Why not the IP2Proxy LITE database?<\/h3><\/dt>\nWe tried it: the free IP2Proxy LITE edition only lists open public proxies \u2014 no VPN servers and no Tor exits (those are reserved for the paid edition) \u2014 and is more than 1 GB in size. The X4BNet list is a few hundred KB and actually recognises VPN providers.<\/p><\/dd>\n
Can other plugins use the VPN list?<\/h3><\/dt>\nYes. Once the VPN list is installed:<\/p>\n\n
$is_vpn = apply_filters( 'wonderful_geoblocking_countries_is_vpn_ip', null, $ip );\n<\/code><\/pre>\n\nIt returns true<\/code> or false<\/code>, and the default (null<\/code>) while the VPN list is disabled or not installed.<\/p><\/dd>\nIs any visitor data sent to a third party?<\/h3><\/dt>\nNo. Country lookups run locally against the downloaded database file. The only external request is the database download itself, which you trigger with your own token.<\/p><\/dd>\n\n<\/dl>\n\n\n
1.1.0<\/h4>\n\n\n- Added: VPN blocking. Every area (site access, login, registration) can now also block visitors who use a VPN service, regardless of their country. It uses the free X4BNet VPN list (optional, about 200 KB, no token needed), which the plugin downloads onto your server and refreshes every week.<\/li>\n
- Added:
wonderful_geoblocking_countries_is_vpn_ip<\/code> filter so other plugins can reuse the VPN list.<\/li>\n- Improved: the database section of the settings page is clearer \u2014 the required country database and the optional VPN list each show their own status, and one button updates both.<\/li>\n
- Improved: the settings page shows whether your current IP is on the VPN list.<\/li>\n
- Improved: downloaded databases are validated before they replace the installed file, and archives are unpacked without loading them into memory.<\/li>\n<\/ul>\n\n
1.0.3<\/h4>\n\n\n- Fixed: the 1.0.2 release package was missing the bundled Select2 library (the build skipped the production dependencies), so the country lists on the settings page rendered as plain multi-select boxes. The build process now always ships it.<\/li>\n
- Improved: mode, countries and block message of each area are now collapsible on the settings page \u2014 expanded while the area is enabled, collapsed otherwise (still one click away, so you can configure an area before switching it on). The page is much easier to read.<\/li>\n
- Tested up to WordPress 7.1.<\/li>\n<\/ul>\n\n
1.0.2<\/h4>\n\n\n- Updated the bundled Select2 library from the 4.1.0 release candidate to the stable 4.1.0 release (now managed via Composer).<\/li>\n
- Fixed the IP2Location terms-of-use link in the readme.<\/li>\n
- Corrected the \"Tested up to\" header to a major.minor WordPress version.<\/li>\n<\/ul>\n\n
1.0.1<\/h4>\n\n\n- Added a
wonderful_geoblocking_countries_country_for_ip<\/code> filter so other plugins can reuse the IP2Location country lookup.<\/li>\n<\/ul>\n\n1.0.0<\/h4>\n\n\n- Initial release.<\/li>\n<\/ul>","raw_excerpt":"Blocks site access, login, or registration for visitors from selected countries or VPN services, with a custom message per area.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/cn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/341024","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/cn.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/cn.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=341024"}],"author":[{"embeddable":true,"href":"https:\/\/cn.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/wonderfulplugins"}],"wp:attachment":[{"href":"https:\/\/cn.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=341024"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/cn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=341024"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/cn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=341024"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/cn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=341024"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/cn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=341024"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/cn.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=341024"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}