Resolve lukasjuhas/lj-maintenance-mode#37 by adding 6 "Allowed" setting lists; match one on a list and maintenance mode lets the request proceed.
Add "Allowed IPs" setting option for $_SERVER[REMOTE_ADDR] request matching.
Allow for IPv4 and IPv6.
Allow for partial matches (starts with) to allow whole subnets access.
Add "Allowed URIs (Strict)" setting option for $_SERVER[REQUEST_URI] request matching.
Ignore query string and trailing slashes.
Always allow wp-login.php as a hardcoded value (not an option to turn it off).
Add "Allowed URIs (Contains)" setting, where $_SERVER[REQUEST_URI] request matching.
Ignore query string and trailing slashes.
Add "Allowed Query Strings" setting option for $_SERVER[QUERY_STRING] request matching.
Always allow action=enter_recovery_mode&rm_token= as a hardcoded value (not an option to turn it off).
Add "Allowed Referers" setting option for $_SERVER[HTTP_REFERER] request matching.
Add "Allowed User Agents" setting option for $_SERVER[HTTP_USER_AGENT] request matching.
Tip: This could also be referred to as 'exclude' options; but, I'm going with 'allow' as the settings are from the maintenance modes perspective ... block this and allow that style language.
Resolve lukasjuhas/lj-maintenance-mode#37 by adding 6 "Allowed" setting lists; match one on a list and maintenance mode lets the request proceed.
Add "Allowed IPs" setting option for $_SERVER[REMOTE_ADDR] request matching.
Add "Allowed URIs (Strict)" setting option for $_SERVER[REQUEST_URI] request matching.
wp-login.php
as a hardcoded value (not an option to turn it off).Add "Allowed URIs (Contains)" setting, where $_SERVER[REQUEST_URI] request matching.
Add "Allowed Query Strings" setting option for $_SERVER[QUERY_STRING] request matching.
action=enter_recovery_mode&rm_token=
as a hardcoded value (not an option to turn it off).Add "Allowed Referers" setting option for $_SERVER[HTTP_REFERER] request matching.
Add "Allowed User Agents" setting option for $_SERVER[HTTP_USER_AGENT] request matching.
Tip: This could also be referred to as 'exclude' options; but, I'm going with 'allow' as the settings are from the maintenance modes perspective ...
block this and allow that
style language.