Users manager – PN

Maelezo

This WordPress plugin simplifies user management by providing customizable registration forms, login functionality, and profile editing directly on your website. Perfect for membership sites, e-commerce, and community platforms, it supports advanced features like role-based access control, email verification, and user activity tracking. Its intuitive interface allows easy setup and management, while offering compatibility with popular themes and plugins. Enhance your site’s user experience with responsive designs and seamless integrations. Whether for small businesses or large-scale websites, this plugin is your all-in-one solution for efficient user management.

Core User Management Features:

• Frontend User Registration: Complete user registration system accessible directly from your website’s frontend. Users can create accounts without accessing the WordPress admin area, with customizable registration forms that include email, password, and unlimited custom fields.

• Custom Login System: Beautiful, responsive login forms that integrate seamlessly with your site design. Includes “Remember Me” functionality and password recovery links, all accessible via shortcodes.

• Advanced Profile Management: Comprehensive user profile system with tabbed interface including Profile editing, Image/avatar management, Notifications preferences, Private file management, and Advanced options (password change, account deletion). Users can edit their profiles directly from the frontend with real-time validation.

• Profile Completion Tracking: Visual progress indicator showing profile completion percentage. Administrators can configure which fields count toward completion, encouraging users to complete their profiles with helpful links to incomplete sections.

Powerful Form Builder:

The plugin includes a sophisticated form builder that allows you to create custom registration and profile forms with a wide variety of field types:

• Input Fields: Text, number, email, password, URL, date, time, color, hidden, and nonce fields. Password fields include strength checker with visual feedback and requirements validation.

• Advanced Input Types: Range sliders with min/max labels, star rating systems (customizable number of stars), checkbox switches with toggle styling, and radio button groups with custom styling.

• Media Fields: Image upload with gallery support (single or multiple), video upload and management, audio file upload, and general file upload with preview.

• Rich Content Fields: Textarea for longer text input, WYSIWYG editor (Trumbowyg) for rich text editing, HTML content blocks, and audio recorder with transcription capabilities.

• Selection Fields: Single and multiple select dropdowns with search functionality, custom selector component with AJAX search, and tag input system with autocomplete suggestions.

• Complex Fields: Multi-field groups (html_multi) that allow creating repeating field sets with drag-and-drop reordering, conditional fields that show/hide based on parent field values, and field sections with collapsible groups.

All form fields support: custom CSS classes, required field validation, placeholder text, help descriptions, default values, conditional display logic, and custom validation rules.

Security Features:

• Google reCAPTCHA v3 Integration: Invisible bot protection with score-based verification. Configurable threshold settings and automatic suspicious registration detection with email notifications to administrators.

• Honeypot Protection: Hidden form fields that trap automated bots without affecting legitimate users.

• Rate Limiting: Configurable limits on registration attempts per IP address within specified time windows to prevent abuse.

• Akismet Integration: Spam detection for user registrations using WordPress’s built-in Akismet service.

• Bot Analysis Tool: Advanced analysis system that examines existing users for bot patterns including suspicious email patterns, bot-like usernames, empty profiles, rapid registrations from same IP, suspicious user agents, sequential email patterns, and generic display names. Provides detailed reports with suspicion scores and pattern identification.

• Security Logging: Comprehensive logging system that tracks security events, failed registration attempts, suspicious activities, and bot confirmations for administrative review.

User Profile Features:

• Custom Avatar System: Users can upload custom profile pictures with automatic Gravatar fallback. Includes random avatar generation with color-coded initials for users without images. Supports custom image sets for default avatars.

• Profile Fields Management: Administrators can add unlimited custom fields to user profiles through an intuitive interface. Fields can be added, edited, or removed dynamically without code changes. Supports all form field types mentioned above.

• Profile Validation: Real-time validation of required profile fields with visual indicators. Users are prompted to complete missing required information before accessing certain features.

• Auto-Login Tool: Administrators can log in as any user (except other administrators) for support and testing purposes. Includes secure token-based authentication and automatic session management.

• Account Management: Users can change passwords through WordPress’s standard password reset system, delete their own accounts with password confirmation, and manage notification preferences.

Notifications System:

• Integrated Notifications: Full integration with Mail Manager – PN plugin for advanced email notifications. Users can manage their notification preferences directly from their profile.

• Newsletter Management: Newsletter subscription system with email activation links. Users receive welcome emails upon newsletter activation. Supports multi-language notification preferences when Polylang is active.

• Notification Preferences: Users can opt-in/opt-out of system notifications with a simple checkbox. Language selection for notifications when multiple languages are available.

CSV Import/Export:

• Bulk User Import: Import multiple users at once using CSV files. Download customizable CSV templates that include all registered profile fields with proper formatting instructions.

• Template Generation: Automatic CSV template generation based on your current form field configuration. Includes example rows showing proper data formats for each field type.

• Data Validation: CSV import includes validation for email addresses, role assignments, date formats, and custom field types before user creation.

Shortcodes:

The plugin provides numerous shortcodes for easy integration:

• [userspn-profile] – Complete user profile interface (popup or inline)
• [userspn-login] – Login form
• [userspn-user-register-form] – Registration form
• [userspn-profile-edit] – Profile editing form
• [userspn-profile-image] – Avatar/image management
• [userspn-get-avatar] – Display user avatar
• [userspn-notifications] – Notification preferences
• [userspn-user-files] – Private file management
• [userspn-csv-template] – Download CSV template
• [userspn-csv-template-upload] – CSV upload interface
• [userspn-call-to-action] – Customizable call-to-action blocks
• [userspn-newsletter] – Newsletter subscription form

Gutenberg Blocks:

• User Profile Block: Native Gutenberg block for inserting user profiles directly into pages and posts. Supports inline display mode and integrates seamlessly with the block editor.

Additional Features:

• Multi-language Support: Full Polylang integration for multi-language sites. Users can select their preferred notification language, and profile fields adapt to the current language context.

• Responsive Design: All forms and interfaces are fully responsive and mobile-friendly, ensuring a great experience on all devices.

• AJAX-Powered: Forms submit via AJAX without page reloads, providing a smooth user experience with loading indicators and success/error messages.

• Customizable Styling: Extensive CSS classes and structure allow for easy theme customization. All components follow consistent naming conventions.

• WooCommerce Compatibility: Designed to work seamlessly with WooCommerce, avoiding conflicts during checkout processes.

• Cron Jobs: Built-in scheduled tasks for maintenance, cleanup, and automated processes.

• Developer-Friendly: Extensive hooks and filters for developers to extend functionality. Clean, well-documented code following WordPress coding standards.

Technical Highlights:

• Uses WordPress best practices for security, sanitization, and validation
• Proper nonce verification for all form submissions
• KSES filtering for safe HTML output
• Efficient database queries and caching where appropriate
• Proper script and style enqueuing with dependency management
• Translation-ready with .pot file included
• Compatible with WordPress 3.0.1+ and PHP 7.2+

This plugin transforms WordPress user management from a backend-only task into a comprehensive, user-friendly frontend experience that enhances engagement and simplifies administration.

Credits

This plugin stands on the shoulders of giants

Tooltipster v4.2.8 – A rockin’ custom tooltip jQuery plugin
Developed by Caleb Jacob and Louis Ameline
MIT license
https://calebjacob.github.io/tooltipster/
https://github.com/calebjacob/tooltipster/blob/master/dist/js/tooltipster.main.js
https://github.com/calebjacob/tooltipster/blob/master/dist/css/tooltipster.main.css

Owl Carousel v2.3.4
Licensed under: SEE LICENSE IN https://github.com/OwlCarousel2/OwlCarousel2/blob/master/LICENSE
Copyright 2013-2018 David Deutsch
https://owlcarousel2.github.io/OwlCarousel2/
https://github.com/OwlCarousel2/OwlCarousel2/blob/develop/dist/owl.carousel.js

Trumbowyg v2.27.3 – A lightweight WYSIWYG editor
alex-d.github.io/Trumbowyg/
License MIT – Author : Alexandre Demode (Alex-D)
https://github.com/Alex-D/Trumbowyg/blob/develop/src/ui/sass/trumbowyg.scss
https://github.com/Alex-D/Trumbowyg/blob/develop/src/ui/sass/trumbowyg.scss
https://github.com/Alex-D/Trumbowyg/blob/develop/src/trumbowyg.js

Developers

Architecture Overview

The plugin follows WordPress coding standards and uses an object-oriented architecture with a modular class structure. The core plugin class (USERSPN) orchestrates all functionality through a custom loader system (USERSPN_Loader) that manages actions, filters, and shortcodes.

Core Structure:
* Main plugin file: userspn.php – Defines constants, activation/deactivation hooks, and initializes the plugin
* Core class: includes/class-userspn.php – Main orchestrator that loads all dependencies and registers hooks
* Loader system: includes/class-userspn-loader.php – Manages all WordPress hooks (actions, filters, shortcodes)
* Modular classes: Each major feature is encapsulated in its own class file

Core Classes

Main Classes:
* USERSPN – Core plugin class that initializes all components
* USERSPN_Loader – Hook management system for actions, filters, and shortcodes
* USERSPN_Common – Shared functionality for both admin and public areas
* USERSPN_Admin – Admin-specific functionality and UI
* USERSPN_Public – Frontend functionality and public-facing features

Feature Classes:
* USERSPN_Forms – Form builder and field management system
* USERSPN_Functions_User – User management, profiles, registration, and authentication
* USERSPN_Functions_Attachment – File upload and attachment handling
* USERSPN_Security – Security features (reCAPTCHA, Akismet, honeypot, rate limiting, bot analysis)
* USERSPN_Validation – Form and data validation
* USERSPN_Notifications – Notification system integration
* USERSPN_Mailing – Email functionality
* USERSPN_CSV – CSV import/export functionality
* USERSPN_Shortcodes – Shortcode registration and rendering
* USERSPN_Templates – Template loading system
* USERSPN_Settings – Settings and configuration management
* USERSPN_Blocks – Gutenberg block registration
* USERSPN_Data – Data management and caching
* USERSPN_Cron – Scheduled task management
* USERSPN_Popups – Popup/modal functionality
* USERSPN_Selector – Custom selector component
* USERSPN_i18n – Internationalization and translation

Constants

The plugin defines several constants that can be used in your code:

• USERSPN_VERSION – Current plugin version (1.0.29)
• USERSPN_DIR – Plugin directory path
• USERSPN_URL – Plugin URL
• USERSPN_KSES – Allowed HTML elements and attributes for KSES filtering

Available Hooks

Actions:
* userspn_user_register – Fires after user registration (includes custom meta data)
* userspn_user_wp_login – Fires when user logs in via WordPress login
* userspn_cron_daily – Daily scheduled task hook
* userspn_cron_thirty_minutes – 30-minute scheduled task hook

Filters:
* userspn_get_avatar – Filter avatar output (priority: 10, accepts 5 args)
* userspn_body_classes – Add custom body classes
* userspn_show_admin_bar – Control admin bar visibility
* userspn_lostpassword_url – Customize lost password URL
* userspn_wp_mail_content_type – Set email content type to HTML

WordPress Standard Hooks Used:
* user_register – WordPress user registration hook
* profile_update – WordPress profile update hook
* wp_login – WordPress login hook
* get_avatar – WordPress avatar filter
* wp_nav_menu_items – Add items to navigation menus
* render_block – Filter Gutenberg block rendering
* body_class – Add classes to body tag
* show_admin_bar – Control admin bar display
* login_headerurl – Customize login page logo URL
* login_headertext – Customize login page logo text
* wp_mail_content_type – Email content type filter

Extension Points

Adding Custom Form Fields:
The form builder system supports extensible field types. Fields are defined in arrays with the following structure:
php
$field = [
'id' => 'field_id',
'label' => 'Field Label',
'type' => 'text|email|password|textarea|select|checkbox|radio|file|image|etc',
'required' => true|false,
'value' => 'default_value',
'placeholder' => 'Placeholder text',
'class' => 'custom-css-class',
'help' => 'Help text',
'conditional' => ['parent' => 'parent_field_id', 'value' => 'show_value']
];

Custom Validation:
Extend the USERSPN_Validation class or use the validation system through form field configuration. Validation rules can be added per field type.

Custom Shortcodes:
Shortcodes are registered through the USERSPN_Loader system. To add custom shortcodes, hook into the shortcode registration process or extend the USERSPN_Shortcodes class.

AJAX Endpoints:
* wp_ajax_userspn_ajax – Authenticated AJAX requests
* wp_ajax_userspn_ajax_nopriv – Non-authenticated AJAX requests
* wp_ajax_nopriv_userspn_ajax_nopriv – Alternative non-authenticated endpoint

Security Integration:
The USERSPN_Security class provides static methods for:
* verify_recaptcha($token, $action) – Verify Google reCAPTCHA v3
* verify_akismet($data) – Check content with Akismet
* check_rate_limit($ip, $action, $limit, $window) – Rate limiting
* analyze_bot_patterns($user_id) – Bot detection analysis

Form Field Types

The plugin supports extensive form field types:

Basic Inputs:
* text, email, password, url, number, date, time, color, hidden, nonce

Advanced Inputs:
* range – Slider with min/max labels
* rating – Star rating system
* switch – Toggle switch
* radio – Radio button groups

Media Fields:
* image – Single or multiple image upload with gallery
* video – Video upload and management
* audio – Audio file upload
* file – General file upload with preview

Rich Content:
* textarea – Multi-line text input
* editor – WYSIWYG editor (Trumbowyg)
* html – HTML content blocks
* audio_recorder – Audio recorder with transcription

Selection Fields:
* select – Single select dropdown
* select_multiple – Multiple select dropdown
* selector – Custom AJAX selector component
* tags – Tag input with autocomplete

Complex Fields:
* html_multi – Repeating field groups with drag-and-drop
* conditional – Fields that show/hide based on parent values
* section – Collapsible field sections

Database Schema

The plugin uses WordPress standard user meta (wp_usermeta) for storing custom profile fields. Field values are stored with the field ID as the meta key. For array fields (like html_multi), values are stored as serialized arrays.

Key Options:
* userspn_recaptcha_secret_key – reCAPTCHA secret key
* userspn_recaptcha_threshold – reCAPTCHA score threshold (default: 0.5)
* userspn_dashboard_logo – Enable/disable custom dashboard logo
* userspn_user_change_password_wp_defaults – Use WordPress default password reset

JavaScript API

The plugin includes several JavaScript modules:

Core Modules:
* userspn.js – Main plugin JavaScript
* userspn-ajax.js – AJAX handling
* userspn-forms.js – Form functionality
* userspn-notifications.js – Notification system
* userspn-popups.js – Popup management
* userspn-selector.js – Custom selector component
* userspn-profile-menu.js – Profile menu navigation
* userspn-profile-progress.js – Profile completion tracking
* userspn-user-register-form.js – Registration form handling
* userspn-profile-fields-validation.js – Real-time validation

External Libraries:
* Tooltipster v4.2.8 – Tooltips
* Owl Carousel v2.3.4 – Image galleries
* Trumbowyg v2.27.3 – WYSIWYG editor
* DataTables – Admin tables

CSS Architecture

The plugin uses a modular CSS structure with consistent naming:

Naming Convention:
* Prefix: userspn-
* BEM-like structure: userspn-block__element--modifier
* Utility classes: userspn-display-none, userspn-mb-10, userspn-width-100-percent

Main Stylesheets:
* userspn.css – Core styles
* userspn-admin.css – Admin-specific styles
* userspn-public.css – Public-facing styles
* userspn-popups.css – Popup/modal styles
* userspn-profile-completion.css – Profile progress styles
* userspn-selector.css – Selector component styles

Development Guidelines

Coding Standards:
* Follow WordPress PHP Coding Standards
* Use WordPress functions for security (sanitization, validation, nonces)
* All output must be escaped using esc_html(), esc_attr(), esc_url(), etc.
* Use KSES filtering for HTML content (see USERSPN_KSES constant)
* Prefix all functions, classes, and variables with userspn_ or USERSPN_

Security Best Practices:
* Always verify nonces for form submissions
* Sanitize all user input
* Validate data before database operations
* Use prepared statements for database queries
* Implement proper capability checks (current_user_can())

Internationalization:
* All user-facing strings must be translatable using __(), _e(), esc_html__(), etc.
* Text domain: userspn
* Translation files located in /languages/ directory
* .pot file included for translators

Performance:
* Use WordPress transients for caching when appropriate
* Minimize database queries
* Enqueue scripts/styles only when needed
* Use dependency management for scripts/styles
* Lazy load heavy components

Integration Examples

Adding Custom Profile Fields Programmatically:
`php
// Get existing fields
$fields = get_option(‘userspn_user_register_fields’, []);

// Add new field
$fields[] = [
‘id’ => ‘custom_field’,
‘label’ => ‘Custom Field’,
‘type’ => ‘text’,
‘required’ => true
];

// Save fields
update_option(‘userspn_user_register_fields’, $fields);
`

Customizing Avatar Output:
php
add_filter('userspn_get_avatar', function($avatar, $user_id, $size) {
// Custom avatar logic
return $avatar;
}, 10, 3);

Extending Form Validation:
php
// Hook into validation process
add_filter('userspn_validate_field', function($valid, $field, $value) {
if ($field['id'] === 'custom_field') {
// Custom validation logic
return is_valid($value);
}
return $valid;
}, 10, 3);

Testing

The plugin is tested with:
* WordPress …