I use WordPress as the backbone of a site I run, including using it for user authentication. This means a lot of people who aren’t invovled in running the site are logging in and could see the dashboard. Now, it’s not that there’s anything really secret there, but it makes things look a lot less “finished” to have users deposited on a page that has no relevance to them. This is where the Hide Dashboard plugin from Patrick/DeepWave comes in. It does a nice job of getting users to their profile page and generally hiding most of the dashboard things that regular users don’t need to see.
I, however, wanted a little more. I wanted to make sure that regular users who might be, well, “curious” about the inner workings of the site and who have some knowledge of wp-admin URL structure to be unable to get at anything but their profile page. To this end, I added a little to the code:
-
// add after line 41, which reads: if(!current_user_can('level_10')){
-
if (strpos($_SERVER['REQUEST_URI'],'/wp-admin') !== FALSE
-
and strpos($_SERVER['REQUEST_URI'],'/wp-admin/profile.php') !== 0){
-
wp_safe_redirect('/wp-admin/profile.php');
-
}
This should redirect any non-admin user off of any /wp-admin* page to /wp-admin/profile.php. This might, however, cause issues for mid-level users (i.e. authors/editors/etc may not be able to access needed functions) and I haven’t tested it thoroughly and there might be a better way to do this. YMMV. See also some comment-discussion on these changes at the plugin’s own page: me Patrick me.
Comments 4
I am also following the status of Hide-Dashboard plug-in. It does not appear to be working for me in WP v2.6. Thanks for your “work around” code. I may have to go that route if the plug-in doesn’t work in 2.6.
Posted 30 Jul 2008 at 4:58 pm ¶Derek–
As far as I can tell, there isn’t anything inherent to the plugin that would or wouldn’t work in 2.6; I’ve upgraded to 2.6 with no trouble (and my workaround code is independent of 2.6). I can tell you that Patrick is working on a 1.2 release of the plugin that incorporates the redirecting feature of my code fragment above and that I’m testing it under WP2.6.
Thanks for the update. Did they plugin work for you in WP v2.6 prior to your work around code? If I can be of any assistance in beta testing I would be happy to help.
Posted 31 Jul 2008 at 7:19 am ¶The unmodified 1.1 version of the plugin worked for me in 2.6, but that version doesn’t include the redirection behavior that is added by my code fragment above (regardless of WP version).