2.2

Added

• Admin bar icon to indicate wether password protection is enabled/disabled.
• Option to show "Remember me" checkbox. Props Christian Güdel.
• REST API access disabled if password not entered.
• Admin option to allow REST API access.

Security

• More robust checking of password hashes.

2.1

Added

• Update caching notes for WP Engine and W3 Total Cache plugin.
• Tested up to WordPress 4.8

2.0.3

Added

• Show user's IP address beside "Allow IP Addresses" admin setting.
• Add CHANGELOG.md and README.md

Changed

• Declare methods as public or private and use PHP5 constructors.

2.0.2

Added

• Check allowed IP addresses are valid when saving.

Changed

• Only redirect to allowed domain names when logging out.

2.0.1

Changed

• Split logout functionality into separate function.

Security

• Use a more complex password hash for cookie key. Props Marcin Bury, Securitum.

2.0

Added

• Added password_protected_logout_link shortcode.
• Load 'password-protected-login.css' in theme folder if it exists.
• Added password_protected_stylesheet_file filter to specify alternate stylesheet location.
• Added is_user_logged_in(), login_url(), logout_url() and logout_link() methods.
• Added Basque, Czech, Greek, Lithuanian and Norwegian translations.

Changed

• Better handling of login/out redirects when protection is not active on home page.

1.9

Fixed

• Fixed "Allow Users" functionality with is_user_logged_in(). Props PatRaven.

Added

• Added option for allowed IP addresses which can bypass the password protection.
• Added 'password_protected_is_active' filter.

1.8

Added

• Support for adding "password-protected-login.php" in theme directory.
• Allow filtering of the 'redirect to' URL via the 'password_protected_login_redirect_url' filter.
• Added 'password_protected_login_messages' action to output errors and messages in template.
• Updated translations.

Changed

• Use current_time( 'timestamp' ) instead of time() to take into account site timezone.
• Check login earlier in the template_redirect action.

1.7.2

Fixed

• Fix always allow access to robots.txt.

Added

• Added 'password_protected_login_redirect' filter.
• Updated translations.

1.7.1

Fixed

• Fix login template compatibility for WordPress 3.9