{"id":350848,"date":"2026-08-12T07:42:18","date_gmt":"2026-08-12T07:42:18","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/mynew-registration-lockdown\/"},"modified":"2026-08-12T07:42:00","modified_gmt":"2026-08-12T07:42:00","slug":"mynew-registration-lockdown","status":"publish","type":"plugin","link":"https:\/\/sr.wordpress.org\/plugins\/mynew-registration-lockdown\/","author":23544668,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.2","stable_tag":"1.0.2","tested":"7.0.4","requires":"6.5","requires_php":"7.4","requires_plugins":null,"header_name":"MyNew Registration Lockdown","header_author":"MyNew Technologies","header_description":"Enforces a centralized policy that blocks unauthorized WordPress user creation while preserving approved administrative workflows.","assets_banners_color":"f1f2e9","last_updated":"2026-08-12 07:42:00","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/mynewtechnologies.com\/products\/registration-firewall\/","header_author_uri":"https:\/\/mynewtechnologies.com\/","rating":0,"author_block_rating":0,"active_installs":0,"downloads":44,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.2":{"tag":"1.0.2","author":"mynewtechnologies","date":"2026-08-12 07:42:00"}},"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3643007,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3643007,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3643007,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3643007,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.2"],"block_files":[],"assets_screenshots":[],"screenshots":[]},"plugin_section":[],"plugin_tags":[8533,6459,603,600,1917],"plugin_category":[54,58],"plugin_contributors":[275310],"plugin_business_model":[],"class_list":["post-350848","plugin","type-plugin","status-publish","hentry","plugin_tags-audit","plugin_tags-lockdown","plugin_tags-registration","plugin_tags-security","plugin_tags-users","plugin_category-security-and-spam-protection","plugin_category-user-management","plugin_contributors-mynewtechnologies","plugin_committers-mynewtechnologies"],"banners":{"banner":"https:\/\/ps.w.org\/mynew-registration-lockdown\/assets\/banner-772x250.png?rev=3643007","banner_2x":"https:\/\/ps.w.org\/mynew-registration-lockdown\/assets\/banner-1544x500.png?rev=3643007","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/mynew-registration-lockdown\/assets\/icon-128x128.png?rev=3643007","icon_2x":"https:\/\/ps.w.org\/mynew-registration-lockdown\/assets\/icon-256x256.png?rev=3643007","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p>MyNew Registration Lockdown enforces one centralized user-creation policy across WordPress. Instead of relying only on the public registration setting or a visible form, it evaluates user creation at the shared <code>wp_insert_user()<\/code> insertion layer.<\/p>\n\n<p>The default policy blocks unauthorized account creation while allowing:<\/p>\n\n<ul>\n<li>Logged-in administrators with the <code>create_users<\/code> capability inside wp-admin.<\/li>\n<li>WP-CLI user creation by a server operator.<\/li>\n<li>Explicitly authorized integrations through the documented <code>mnrl_is_user_creation_authorized<\/code> filter.<\/li>\n<\/ul>\n\n<p>The plugin also disables the default registration action, can disable multisite signups, records privacy-aware audit events, retains those events for a configurable period, and can send threshold-based email alerts.<\/p>\n\n<p>No telemetry is collected. The plugin does not contact MyNew Technologies or any third-party service.<\/p>\n\n<p>Documentation and support: https:\/\/mynewtechnologies.com\/products\/registration-firewall\/<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Upload the <code>mynew-registration-lockdown<\/code> directory to <code>\/wp-content\/plugins\/<\/code> or install the ZIP through Plugins &gt; Add New &gt; Upload Plugin.<\/li>\n<li>Activate the plugin.<\/li>\n<li>Open Settings &gt; Registration Lockdown.<\/li>\n<li>Review the default authorization policy before deploying to a site that intentionally creates users through custom integrations.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"does%20this%20merely%20hide%20the%20registration%20form%3F\"><h3>Does this merely hide the registration form?<\/h3><\/dt>\n<dd><p>No. It enforces policy at the user insertion layer used by WordPress core and most integrations.<\/p><\/dd>\n<dt id=\"can%20administrators%20still%20create%20users%3F\"><h3>Can administrators still create users?<\/h3><\/dt>\n<dd><p>Yes, by default, logged-in users with the <code>create_users<\/code> capability can create users from wp-admin.<\/p><\/dd>\n<dt id=\"can%20an%20integration%20be%20allowed%3F\"><h3>Can an integration be allowed?<\/h3><\/dt>\n<dd><p>Yes. Authenticate and authorize the integration, then return <code>true<\/code> from the <code>mnrl_is_user_creation_authorized<\/code> filter for that specific request.<\/p><\/dd>\n<dt id=\"does%20the%20plugin%20disable%20xml-rpc%20or%20remove%20rest%20routes%3F\"><h3>Does the plugin disable XML-RPC or remove REST routes?<\/h3><\/dt>\n<dd><p>No. Those interfaces may provide unrelated functionality. The plugin blocks unauthorized user creation without unnecessarily disabling entire subsystems.<\/p><\/dd>\n<dt id=\"what%20data%20is%20logged%3F\"><h3>What data is logged?<\/h3><\/dt>\n<dd><p>The plugin stores the request time, request channel, method, path, and user agent. IP, login, and email values are stored only as keyed SHA-256 hashes.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.2<\/h4>\n\n<ul>\n<li>Replaced interpolated table identifiers with WordPress identifier placeholders.<\/li>\n<li>Documented intentional cache bypasses for retention cleanup and uninstall operations.<\/li>\n<li>Eliminated the remaining Plugin Check database warnings.<\/li>\n<\/ul>\n\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>Resolved Plugin Check findings for translation loading, global prefixes, translator comments, and request classification.<\/li>\n<li>Added short-lived object caching for dashboard aggregates and recent events.<\/li>\n<li>Improved database-query documentation and cache invalidation.<\/li>\n<li>Moved cleanup scheduling to activation and expanded uninstall cleanup.<\/li>\n<li>Added stronger PHPDoc and defensive result handling.<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Initial production release.<\/li>\n<li>Central user-creation policy gate.<\/li>\n<li>Administrator and WP-CLI authorization controls.<\/li>\n<li>Privacy-aware database audit log.<\/li>\n<li>Retention cleanup and threshold alerts.<\/li>\n<li>Settings and recent-events dashboard.<\/li>\n<\/ul>","raw_excerpt":"Blocks unauthorized WordPress user creation at the shared insertion layer while preserving approved administrator and WP-CLI workflows.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/sr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/350848","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/sr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/sr.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/sr.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=350848"}],"author":[{"embeddable":true,"href":"https:\/\/sr.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/mynewtechnologies"}],"wp:attachment":[{"href":"https:\/\/sr.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=350848"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/sr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=350848"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/sr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=350848"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/sr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=350848"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/sr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=350848"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/sr.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=350848"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}