{"id":160525,"date":"2022-07-29T10:51:35","date_gmt":"2022-07-29T10:51:35","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/rabbit-hole\/"},"modified":"2026-01-17T09:45:58","modified_gmt":"2026-01-17T09:45:58","slug":"rabbit-hole","status":"closed","type":"plugin","link":"https:\/\/wordpress.org\/plugins\/rabbit-hole\/","author":18240797,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.2","stable_tag":"trunk","tested":"6.9.4","requires":"4.9","requires_php":"","requires_plugins":null,"header_name":"Rabbit Hole","header_author":"frafish","header_description":"Rabbit Hole is a module that adds the ability to control what should happen when an entity is being viewed at its own page.","assets_banners_color":"fefefe","last_updated":"2026-01-17 09:45:58","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/wordpress.org\/plugins\/rabbit-hole\/","header_author_uri":"https:\/\/pescefrancesco.it","rating":0,"author_block_rating":0,"active_installs":50,"downloads":1106,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","faq","changelog"],"tags":[],"upgrade_notice":[],"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":2763416,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.png":{"filename":"icon-256x256.png","revision":2763416,"resolution":"256x256","location":"assets","locale":""},"icon.svg":{"filename":"icon.svg","revision":2763416,"resolution":false,"location":"assets","locale":false}},"assets_banners":{"banner-1544x500.jpg":{"filename":"banner-1544x500.jpg","revision":2763416,"resolution":"1544x500","location":"assets","locale":""},"banner-772x250.jpg":{"filename":"banner-772x250.jpg","revision":2763416,"resolution":"772x250","location":"assets","locale":""}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":[],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":2763416,"resolution":"1","location":"assets","locale":""},"screenshot-2.png":{"filename":"screenshot-2.png","revision":2763416,"resolution":"2","location":"assets","locale":""},"screenshot-3.png":{"filename":"screenshot-3.png","revision":2763416,"resolution":"3","location":"assets","locale":""}},"screenshots":{"1":"Admin Global settings on the Settings -&gt; Rabbit Hole.","2":"Specify a Redirect rule for a specific Post Type, same options available for Single Post.","3":"Settings on Single Post Edit metabox for override global configuration."},"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[1943,2007,24839,727,186],"plugin_category":[55],"plugin_contributors":[190077],"plugin_business_model":[],"class_list":["post-160525","plugin","type-plugin","status-closed","hentry","plugin_tags-allow","plugin_tags-cpt","plugin_tags-deny","plugin_tags-redirect","plugin_tags-seo","plugin_category-seo-and-marketing","plugin_contributors-frapesce","plugin_committers-frapesce"],"banners":[],"icons":{"svg":"https:\/\/ps.w.org\/rabbit-hole\/assets\/icon.svg?rev=2763416","icon":"https:\/\/s.w.org\/plugins\/geopattern-icon\/rabbit-hole_fefefe.svg","icon_2x":false,"generated":true},"screenshots":[{"src":"https:\/\/ps.w.org\/rabbit-hole\/assets\/screenshot-1.png?rev=2763416","caption":"Admin Global settings on the Settings -&gt; Rabbit Hole."},{"src":"https:\/\/ps.w.org\/rabbit-hole\/assets\/screenshot-2.png?rev=2763416","caption":"Specify a Redirect rule for a specific Post Type, same options available for Single Post."},{"src":"https:\/\/ps.w.org\/rabbit-hole\/assets\/screenshot-3.png?rev=2763416","caption":"Settings on Single Post Edit metabox for override global configuration."}],"raw_content":"<!--section=description-->\n<p>Rabbit Hole is a plugin that adds the ability to control what should happen when an entity is being viewed at its own page.<\/p>\n\n<p>Perhaps you have a content type that never should be displayed on its own page, like an image content type that's displayed in a carousel. \nRabbit Hole can prevent this object from being accessible on its own page, through p=xxx (or permalink).<\/p>\n\n<p><strong>Options<\/strong><\/p>\n\n<p>This works by providing multiple options to control what should happen when the entity is being viewed at its own page. \nYou have the ability to\n- Deliver an access denied page (401, 403).\n- Deliver a page not found page (404).\n- Issue a page redirect to any path or external url (301, 30x).\n- Or simply display the entity (regular behavior, 200).<\/p>\n\n<p>This is configurable per:\n- post types and single post\n- taxonomy and single term\n- roles and single user<\/p>\n\n<p>It's possible to generate dynamic values with Twig or Shortcode for the redirect path. \nThis makes it possible to execute different redirects based on whatever logics you need. \nPerhaps you want a user to be able to view nodes that he has created, but no one else's.<\/p>\n\n<p>New options:\n- <em>Archives<\/em>\nSupport for Terms and Authors archive pages\n- <em>Conditions<\/em>\nThere will be the possibility to configure a User Role that override Rabbit Hole completely, useful for Memberships.\n- <em>Display Message<\/em>\nShow a custom Message for unauthorized page (401, 403)<\/p>\n\n<p><strong>Drupal porting<\/strong>\nThis is porting from a beloved <a href=\"https:\/\/www.drupal.org\/project\/rabbit_hole\">Drupal module<\/a> which I used in all my projects.\nThanks to the authors for the idea.<\/p>\n\n<!--section=faq-->\n<dl>\n<dt id=\"default%20settings\"><h3>Default settings<\/h3><\/dt>\n<dd><p>You can find global configuration in Settings =&gt; Rabbit Hole.\nBy default all CPT are predefined as Display page, following the classic WP behavior.<\/p><\/dd>\n<dt id=\"how%20can%20i%20change%20behavior%20for%20a%20single%20post%3F\"><h3>How can I change behavior for a single Post?<\/h3><\/dt>\n<dd><p>Once you enable the \"Allow override\" for single post type you will find the dedicated configuration metabox in post Edit page.<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.2 - 2026-01-12<\/h4>\n\n<ul>\n<li>Fix: Security vulnerability, Cross-Site Request Forgery (CSRF) - CVE-2025-13366<\/li>\n<li>Secure: add more escape\/santize<\/li>\n<\/ul>\n\n<h4>1.1 - 2023-11-04<\/h4>\n\n<ul>\n<li>Add: Support for Authors and Terms archives<\/li>\n<li>Add: Bypass rules by current User Roles<\/li>\n<li>Add: Alternate Message for Denied code (401, 403)<\/li>\n<\/ul>\n\n<h4>1.0.1 - 2022-07-25<\/h4>\n\n<ul>\n<li>Initial release.<\/li>\n<\/ul>","raw_excerpt":"Control what should happen when an entity is being viewed at its own page","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/160525","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=160525"}],"author":[{"embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/frapesce"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=160525"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=160525"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=160525"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=160525"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=160525"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=160525"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}