Lock users if website is idle for certain period ウェブサイトが一定期間アイドル状態の場合にユーザーをロックするAn updated version.

/**

 * Lock user out after a period of inactivity with customizable timeout and warning notification.

 */

// Add settings to WordPress for inactivity timeout

add_action('admin_init', 'register_inactivity_timeout_setting');

function register_inactivity_timeout_setting() {

    register_setting('general', 'inactivity_timeout', [

        'type' => 'integer',

        'description' => 'Inactivity timeout duration in seconds',

        'default' => 300, // Default: 5 minutes

        'sanitize_callback' => 'absint',

    ]);

    add_settings_field(

        'inactivity_timeout',

        'Inactivity Timeout (seconds)',

        function () {

            $value = get_option('inactivity_timeout', 300);

            echo '<input type="number" name="inactivity_timeout" value="' . esc_attr($value) . '" class="small-text" />';

        },

        'general'

    );

}

// Core function to log users out after inactivity

add_action('init', 'lock_user_after_inactivity');

function lock_user_after_inactivity() {

    if (is_user_logged_in()) {

        $user_id = get_current_user_id();

        $last_activity = get_user_meta($user_id, 'last_activity', true);

        $current_time = time();

        $timeout = get_option('inactivity_timeout', 300); // Get timeout from settings

        // Check inactivity

        if ($last_activity && ($current_time - $last_activity) > $timeout) {

            wp_logout();

            wp_redirect(add_query_arg(['login' => 'false', 'reason' => 'inactive'], wp_login_url()));

            exit;

        }

        // Update activity timestamp

        update_user_meta($user_id, 'last_activity', $current_time);

    }

}

// Track user activity on page load

add_action('wp', 'update_user_last_activity');

function update_user_last_activity() {

    if (is_user_logged_in()) {

        update_user_meta(get_current_user_id(), 'last_activity', time());

    }

}

// Inject JavaScript for logout warning notification

add_action('wp_footer', 'inactivity_warning_script');

function inactivity_warning_script() {

    if (is_user_logged_in()) {

        $timeout = get_option('inactivity_timeout', 300) * 1000; // Convert to milliseconds

        $warning_time = $timeout - 30000; // Show warning 30 seconds before logout

        ?>

        <script>

            let inactivityTimeout = <?php echo $timeout; ?>;

            let warningTime = <?php echo $warning_time; ?>;

            let countdown;

            function startInactivityTimer() {

                clearTimeout(countdown);

                // Warning 30 seconds before timeout

                countdown = setTimeout(() => {

                    alert("You have been inactive. You will be logged out in 30 seconds unless you interact.");

                    setTimeout(() => {

                        alert("Logging out now...");

                        window.location.href = "<?php echo esc_url(wp_logout_url(home_url())); ?>";

                    }, 30000);

                }, warningTime);

            }

            document.addEventListener("DOMContentLoaded", () => {

                startInactivityTimer();

                document.body.addEventListener("mousemove", startInactivityTimer);

                document.body.addEventListener("keydown", startInactivityTimer);

            });

        </script>

        <?php

    }

}

// Customize the login message for inactivity logout

add_filter('login_message', 'custom_inactivity_logout_message');

function custom_inactivity_logout_message($message) {

    if (isset($_GET['reason']) && $_GET['reason'] === 'inactive') {

        $message .= '<p class="message error">You were logged out due to inactivity. Please log in again.</p>';

    }

    return $message;

}