UniLogin
Let people sign in with their email address or username, with rate limiting, a login log, domain and group rules and redirects.
30-day money-back guarantee
Changelog — UniLogin
Version 1.2: 19 July 2026
- Native password verification via UserHelper — nested Authentication - Joomla plugin instantiation removed
- Joomla 5 AuthenticationEvent / PrepareFormEvent signatures
- Bound SQL queries for email and username lookups
- Timing-safe handling on unknown users (dummy password hash)
- stopPropagation on successful authentication
- Language packs (en-GB) for plugin strings and admin labels
- Username Fallback defaults to ON
- Failed-attempt cleanup after successful login
- Relative redirect paths work correctly (host-less URLs no longer dropped by Uri::isInternal)
- Installer table creation hardened; PHP 8.1+ recommended
- JoomlaX branding, copyright 2026, XML target 5.0
Version 1.1: 20 November 2025
- Full Joomla 4, 5, and 6 compatibility with modern APIs and best practices
- Added username fallback option to allow users to login with either email or username
- Custom login field label and placeholder customization for better user experience
- Comprehensive rate limiting and brute force protection with configurable attempts and lockout duration
- Complete login logging system with automatic cleanup based on retention period
- Email domain restrictions with whitelist and blacklist modes
- User group restrictions to control which groups can use email login
- Customizable error messages for all authentication errors (user not found, invalid password, account locked, domain blocked)
- Smart redirect system with default redirect URL and group-specific redirect rules using subform
- Enhanced security with IP-based lockout, input validation, and SQL injection prevention
- Reorganized plugin parameters into logical fieldsets with conditional field display
- Improved UI with switcher layout for radio buttons and user-friendly subform interface
- Enhanced error handling with proper exception catching and graceful degradation
- Improved code quality with enhanced documentation, type hints, and security practices
- Fixed domain extraction issues for invalid email formats
- Fixed form field modification to use proper Joomla setFieldAttribute() method
- Fixed redirect URL validation and formatting
- New database table #__unilogin_attempts for login attempt logging
Version 1.0
- Basic email login functionality
- Integration with Joomla authentication system
- Joomla 4 and 5 compatibility
Try email login
Sign in below with the email address or the username. Demo account:
What UniLogin can do for you
Sign in with email or username
People type the address they already remember. UniLogin finds the account and Joomla checks the password as usual.
A login field that says what you mean
Change the Username label and placeholder to "Email or username", or to email only, so the form matches how people sign in.
Slow down password guessing
Set how many failed attempts are allowed and how long the pause lasts before that email address or IP can try again.
A record of every sign-in
Successful, failed and locked attempts are logged for auditing, and old entries are cleared after the number of days you choose.
Only the right email domains
Allow sign-in only from your company domains, or block the domains you don't want, one per line.
Limit it to certain groups
Use email login only for the user groups you pick, and leave every other group on Joomla's standard sign-in.
Messages in your own words
Write your own text for unknown accounts, wrong passwords, locked accounts and blocked domains.
Land on the right page
Send people to a default page after they sign in, or set a different page for each user group.
Compatibility
FAQ
Which Joomla and PHP versions does it support?
Joomla 4, 5 and 6, with PHP 8.1 or later.
Do I need a new login form?
No. UniLogin works with Joomla's own login form and login module, so your current layout stays.
Can people still use their username?
Yes, with Username Fallback on. Turn it off if you want email to be the main way to sign in.
Does it change how passwords are stored?
No. Joomla checks the password with its own hashing, exactly as it does today.
Can I keep the lockout but skip the log?
Yes. Rate limiting and login logging are separate switches.
Can I try it before I buy?
Yes. Sign in on this demo page with the demo account, using the email address or the username.
Ready to add UniLogin to your site?
Read the UniLogin documentation, then pick a plan.
Get UniLogin (opens in a new window)Read the documentation (opens in a new window)