What Logged-Out Visitors See
When a visitor without a login hits protected content, the plugin decides what to show based on the protection method you pick in Protection Rules.
Show Login Form
Section titled “Show Login Form”The default. The locked-content template renders your restriction message followed by the built-in login and register form. The form has two tabs:
- Login - username or email plus password.
- Register - shown only when WordPress registration is enabled (Settings > General > Membership: “Anyone can register”).
Both actions run over AJAX and log the visitor in on success. After a successful registration the new account is logged in automatically.
Show Custom Content
Section titled “Show Custom Content”Renders your own HTML or shortcodes instead of the default message. If your custom content includes the [bplock_login_form] shortcode, the plugin extracts it and renders the built-in form below your message so you keep the working login form while customising everything around it.
Redirect to Another Page
Section titled “Redirect to Another Page”Sends the visitor to a page you choose (for example a sales or login landing page) using a server-side redirect. The redirect page itself is always kept accessible so you do not create a redirect loop.
Brute-force protection
Section titled “Brute-force protection”Login attempts through the plugin form are rate limited to 5 attempts per 15 minutes, keyed by username or IP address. After the limit is reached the form reports that the visitor must wait before trying again. Failed attempts also return how many tries remain.
reCAPTCHA
Section titled “reCAPTCHA”If the “reCAPTCHA for BuddyPress” plugin is active, the login and register form is aware of it and can work alongside it.
Theming
Section titled “Theming”The login and register form and the members-only card carry dark-mode aware styling, so they stay readable in dark themes such as BuddyX, BuddyX Pro, and Reign. If a build step has not produced the minified assets, the plugin falls back to its committed source CSS and JS so the protected page never renders unstyled.