GeoGate | Geo-targeting & Country Rules for WordPress

GeoGate | Geo-targeting, Country Blocking, Redirects, VPN Detection & Consent for WordPress

GeoGate makes WordPress country-aware with a database that lives on your server. Show or hide content by country, continent, EU, state or city; redirect by country or browser language; block or allow regions and networks for the whole site, wp-admin, checkout or comments; detect VPN, proxy, Tor and data-centre traffic; switch WooCommerce currency and prices by region; show a consent banner only where a privacy law requires one; and see a visitor map with country statistics per page. Themes and headless front-ends get a REST endpoint and a JavaScript helper.

Key Features

• Offline geolocation: a one-click install of the free DB-IP Lite city and network databases, or your own GeoLite2 files; Cloudflare country headers honoured; lookups cached and never sent anywhere
• One list expression everywhere: country codes, EU, continents (AFR ASI EUR NAM SAM OCE), GDPR / CCPA / LGPD regimes, states (US-CA), networks (AS12345), VPN / TOR / HOSTING, * for everyone
• Block or allow per scope: the whole site, wp-admin and login, checkout and cart, comments; blocked networks by ASN; allow-listed IPs and CIDR ranges; a signed bypass link; a custom block page with a 451 / 403 / 404 / 503 status
• Administrators are never locked out; a country preview (?gg_as=DE) tests the site as any visitor
• Redirects by visitor country and/or browser language with {cc} {lang} {path} placeholders, 301 or 302, excluded paths, first-visit-only, an opt-out parameter, first match wins
• Targeting: HTML snippets at the top, footer or after the content; popups once per browser; body classes; a different menu per region, for visitors from a region, on a VPN, or on mobile
• Content by region: [geogate show= hide= vpn= else=] shortcodes, [geogate_info field=], a "GeoGate region" block that wraps any blocks server-side
• Body classes (gg-cc-de, gg-eu, gg-vpn), html[data-gg-cc], a geogate JavaScript object with is("EU, GB") and a ready event, REST geogate/v1/me, PHP helpers
• VPN, proxy, Tor and data-centre detection from network names, the official Tor exit list and an optional proxycheck.io lookup: flag (body class + header + rule token), challenge, or block, per scope
• WooCommerce currency and prices by region: multiply by a factor or keep the number, .99 rounding, currency exposed to JavaScript for any other shop
• Consent banner shown only where required (GDPR regions, US privacy-law states, Brazil) or everywhere; accept / reject / categories; a "do not sell or share" notice for US states; script gating with data-gg-consent
• Overview with a world map, top countries, continents, pages by region, recent decisions; an activity log with masked IPs; a lookup tester that shows every scope's verdict; Site Health check

How Rules Work

1. Install the free city database with one click (Settings) — or point GeoGate at a GeoLite2 file you already have
2. Write a rule as a list: DE, AT, CH, EU, ASI, US-CA, AS12345, VPN
3. Pick the scope: whole site, wp-admin, checkout or comments, block or allow
4. Test with Tools › Test an IP, which shows the lookup and every scope's verdict, or preview the site as a visitor from any country

Installation

1. Download the zip from your Library
2. In wp-admin go to Plugins › Add New › Upload Plugin, choose the zip and activate it
3. A new menu entry appears in the admin sidebar; open it
4. GeoGate › Settings › Databases: install the free city database (and the network database for VPN detection)

Requirements

• WordPress 6.0 or newer (tested up to 7.0)
• PHP 8.0 or newer
• About 130 MB of disk for the city database (downloaded on request)
• Optional: WooCommerce for currency switching, a proxycheck.io key for online VPN checks

What You Get

• GeoGate 1.0.0 for WordPress (geogate-1.0.0.zip)
• Full, readable PHP and JavaScript source, no obfuscation
• Updates for the term of your licence
• The MaxMind database reader and a world map, bundled

Works With

Part of the Alpha WordPress line, built with one admin kit; SiteStats shares its geolocation database, SecureShield runs its login defence first: SiteStats, SecureShield, CodeSell, PayStudio, ShareVault, AlphaLogin.

The screenshots show the plugin on our demo site with sample data.