Polanger Admin Suite

Introduction

Polanger Admin Suite is a comprehensive WordPress plugin that gives you complete control over your WordPress admin area. Whether you're building sites for clients, managing a multisite network, or simply want a cleaner admin experience, this plugin has you covered.

Installation

Method 1: WordPress Admin Upload

1. Download the plugin ZIP file from CodeCanyon
2. Go to Plugins → Add New → Upload Plugin
3. Choose the ZIP file and click Install Now
4. After installation, click Activate Plugin

Method 2: FTP Upload

1. Extract the plugin ZIP file
2. Upload the polanger-admin-menu-manager folder to /wp-content/plugins/
3. Go to Plugins in WordPress admin and activate the plugin

Requirements

Menu Manager

The Menu Manager gives you complete control over the WordPress admin menu. Hide items from specific users, rename menu labels, change icons, and reorder items with drag-and-drop.

Menu Hiding

Hide menu items from all users or specific roles. When a menu is hidden, users won't see it in the sidebar.

• Hide from Everyone - Completely removes the menu item from all users
• Hide from Specific Roles - Hide from Administrator, Editor, Author, Contributor, or Shop Manager
• Submenu Support - Hide individual submenu items independently
• Visual Indicators - Red background shows hidden items in the manager

URL Access Blocking

Hiding a menu doesn't prevent direct URL access. Enable URL blocking to completely restrict access.

Renaming & Icons

• Custom Labels - Change any menu item's display name
• 200+ Dashicons - Choose from WordPress's built-in icon library
• Icon Search - Quickly find icons with the search feature
• Original Restore - Reset to original name/icon anytime

Drag & Drop Reordering

Reorganize your admin menu by dragging items to new positions. The new order is saved automatically and applies to all users.

Admin Bar

Customize the WordPress admin bar (toolbar) that appears at the top of your site.

Custom Logo

• Replace WordPress Logo - Upload your own logo (recommended: 20x20px or 40x40px)
• Custom Link URL - Set where the logo links to
• Hide Logo Submenu - Hide items like "About WordPress", "Documentation", etc.

Manage Admin Bar Items

The plugin automatically detects all admin bar items added by WordPress, themes, and plugins.

• Auto-Detection - Finds items from Elementor, WooCommerce, and other plugins
• Hide Items - Click the eye icon to hide any item
• Rename Items - Change the display text of any item
• Frontend Support - Manage items that only appear on the frontend

Custom Links

Add your own links to the admin bar with icons and optional submenus.

Login Page

Secure and customize your WordPress login page with a custom URL, beautiful design, and reCAPTCHA protection.

Custom Login URL

Change the default wp-login.php URL to something unique for added security.

• Custom Slug - Use any URL like /my-login or /secure-access
• Block Default URLs - Redirect wp-login.php and wp-admin to 404
• Permalink Support - Automatically handles trailing slashes based on your settings

Design Options

Create a beautiful, branded login experience with these customization options:

reCAPTCHA Protection

Protect your login page from bots and brute force attacks with Google reCAPTCHA.

reCAPTCHA can be enabled for:

• Login Form
• Registration Form
• Lost Password Form

Activity Log

Track all administrative actions on your WordPress site. The Activity Log is GDPR/KVKK compliant and never stores sensitive data like passwords or email content.

Logged Events

Severity Levels

• Critical - Security-sensitive actions (URL changes, user deletion, password changes)
• Warning - Actions requiring attention (failed logins, plugin deactivation)
• Info - General activity (content changes, logins)

Log Viewer

View and filter logs with a powerful search interface:

• Search - Find by username, action, or object name
• Filter by Action - Show only specific event types
• Date Range - Filter by start and end dates
• Export CSV - Download logs for external analysis
• Pagination - 20 logs per page with navigation

Email Alerts

Get notified when critical events occur:

• Site URL or Home URL changed
• Admin email changed
• User deleted or role changed
• Plugin deleted
• Password changed

Privacy & Retention

• IP Logging - Optional, disabled by default for GDPR compliance
• Auto-Delete - Automatically delete logs after 7, 30, 60, or 90 days
• No Sensitive Data - Passwords, emails, and form content are never logged

Dashboard Widgets

Take control of the WordPress dashboard by managing widgets, hiding admin notices, and creating custom branded widgets.

Widget Visibility

Hide default WordPress dashboard widgets:

• Welcome Panel
• Quick Draft
• Activity
• WordPress Events and News
• Site Health Status

Auto-Hide Third-Party Widgets

Enable this feature to automatically hide all widgets added by plugins and themes. Use the whitelist to allow specific widgets.

Admin Notices

Control the notices that appear at the top of admin pages:

• Hide All Notices - Remove all plugin and theme notices
• Super Admin Exception - Let Super Admins see all notices
• Dashboard Only - Show notices only on the main dashboard
• Log Hidden Notices - Track what notices were hidden

Custom Widgets

Create branded dashboard widgets for your clients or team:

Use Cases:

• Welcome message with agency branding
• Quick links to important pages
• Support contact information
• Training resources and documentation

Custom Admin Menu

Create your own WordPress admin sidebar menus and submenus from the Menu Manager page. This addon is designed for agencies and site owners who need quick access links, custom tool hubs, and client-friendly navigation.

Menu Builder

• Modal-Based Builder - Add new menus using a modern modal UI from Menu Manager
• Main Menu + Submenus - Create a parent menu and unlimited submenu items
• Icon Picker - Select from an expanded Dashicons library
• Menu Position - Control where the custom menu appears in the admin sidebar
• Inline Help Text - Built-in guidance for non-technical users

Targets & New Tab

Each custom menu/submenu can point to an internal admin route or an external URL.

Manage & Edit

• Custom Menus Table - Review all saved menus, targets, and submenu counts
• Edit Button - Reopen modal with prefilled data to update existing menus
• Delete Button - Remove a custom menu and all related submenus in one action
• Duplicate Parent Cleanup - Automatically removes WordPress auto-duplicated parent submenu entries
• Route Safety - Prevents blank fallback pages by redirecting parent/submenu routes to their configured targets

Multisite Control

Multisite Control adds network-wide governance for agencies, developers, and site networks while keeping each module independent and extendable.

Network Defaults

• Define global defaults from Network Admin
• Capture a site's current module settings as reusable network defaults
• Apply effective settings through lightweight filters instead of duplicating module logic

Site Overrides

• Allow or disable site-level overrides per network policy
• Show Network, Override, and Locked status per module
• Keep local site settings intact unless network policy is enabled

Lock System

• Lock Menu Manager, Admin Bar, Login Security, Activity Log, and Dashboard Center
• Disable local forms when a module is network locked
• Use manage_network_options for network settings and manage_options for site-level controls

Settings

Configure access control, two-factor authentication, and other plugin-wide settings.

Access Control

Restrict who can access and modify the plugin settings:

• Allowed Users - Select which administrators can access the plugin
• Access Levels - Full Access or Read-only for each user
• Super Admin Protection - Super Admin (ID 1) can never be locked out
• URL Blocking - Restricted users can't access plugin pages via direct URL

Two-Factor Authentication (2FA)

Add an extra layer of security with email-based 2FA:

Setup Process

1. Click "Send Test Email" to verify email delivery works
2. Enable Two-Factor Authentication
3. Select which roles require 2FA
4. Save your recovery keys

Features

• 6-Digit Codes - Sent via email on each login
• Code Expiry - 5, 10, or 15 minutes
• Role-Based - Require 2FA for specific roles
• Recovery Keys - One-time use backup codes
• Super Admin Bypass - Super Admin is exempt to prevent lockouts

Miscellaneous

• Custom Footer Text - Replace "Thank you for creating with WordPress"
• Hide WordPress Version - Remove version number from admin footer
• Live Preview - See footer changes in real-time

Hooks & Filters

For developers who want to extend or customize the plugin behavior.

Polanger Custom Developer Hooks

Menu Manager Hooks

Admin Bar Hooks

Login Page Hooks

Database

The plugin stores settings in WordPress options and creates one custom table for activity logs.

Options

Activity Log Table

Table name: {prefix}_pdt_admin_logs

CREATE TABLE {prefix}_pdt_admin_logs (
  id bigint(20) unsigned NOT NULL AUTO_INCREMENT,
  user_id bigint(20) unsigned NOT NULL,
  user_login varchar(60) NOT NULL,
  action varchar(100) NOT NULL,
  object_type varchar(50) DEFAULT NULL,
  object_id bigint(20) unsigned DEFAULT NULL,
  object_name varchar(255) DEFAULT NULL,
  ip_address varchar(45) DEFAULT NULL,
  user_agent varchar(255) DEFAULT NULL,
  meta longtext DEFAULT NULL,
  created_at datetime NOT NULL DEFAULT CURRENT_TIMESTAMP,
  PRIMARY KEY (id),
  KEY user_id (user_id),
  KEY action (action),
  KEY created_at (created_at)
);

Security

The plugin follows WordPress security best practices:

• Nonce Verification - All forms use WordPress nonces to prevent CSRF attacks
• Capability Checks - Only users with manage_options can access the plugin
• Input Sanitization - All user inputs are sanitized before storage
• Prepared Statements - Database queries use $wpdb->prepare()
• Super Admin Protection - Super Admin cannot be locked out of the plugin
• Read-Only Mode - Server-side enforcement prevents unauthorized changes
• GDPR Compliance - No sensitive data is logged, IP logging is optional

Changelog

Version 1.4.2 Latest

• New: Multisite Control addon for network-wide defaults, lock policies, and site-level overrides
• New: Network-aware settings engine using effective settings filters across supported modules
• New: Network lock support for Menu Manager, Admin Bar, Login Security, Activity Log, and Dashboard Center
• New: Site override status controls and network-managed module notices
• Improved: Addon activation flow with optional network-wide active addon support
• Improved: 2FA login session handling now respects the original Remember Me preference during verification
• Improved: 2FA resend verification flow hardened with nonce-protected requests and stricter token validation
• Improved: 2FA verification flow now includes stronger user/session guard checks to reduce edge-case failures
• Improved: 2FA trusted device and security logging IP resolution strengthened with trusted-proxy aware validation
• Improved: 2FA email delivery failure behavior is now configurable with secure-by-default login handling
• New: Design System addon scaffold with token-based settings, preset support, and generated CSS output
• Improved: Addon-first theming extensibility via polanger_admin_theme_assets for clean admin UI customization without core CSS overrides

Version 1.4.1

• Improved: Activity Log export flow (CSV/JSON) output handling on Settings page for more consistent downloads
• Improved: Settings export callback visibility and admin_init lifecycle compatibility
• Improved: Activity Log query hardening with validated table-name usage and allowlisted ORDER BY handling
• Improved: 2FA verification comparison updated with timing-safe hash validation (hash_equals)
• Improved: Activity Log IP resolution now prefers REMOTE_ADDR and supports trusted-proxy based forwarded-header parsing
• Improved: Settings input validation for allowed_users with strict array-type guards before normalization

Version 1.4.0

• Major update: All premium features are now available for free
• New: Full Admin Suite experience (menu, login, security, dashboard, activity log)
• New: Custom Admin Menu Builder
• New: Role-based access control improvements
• Improved: UI/UX across all modules
• Improved: Performance and stability
• Improved: Security layers and validation
• Fixed: Minor bugs and edge cases