{"id":287571,"date":"2026-03-17T16:47:06","date_gmt":"2026-03-17T16:47:06","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/ldap-staff-directory\/"},"modified":"2026-03-17T17:12:05","modified_gmt":"2026-03-17T17:12:05","slug":"ldap-staff-directory","status":"publish","type":"plugin","link":"https:\/\/szl.wordpress.org\/plugins\/ldap-staff-directory\/","author":23300469,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"1.0.6","stable_tag":"1.0.6","tested":"6.9.4","requires":"5.8","requires_php":"7.4","requires_plugins":null,"header_name":"LDAP Staff Directory","header_author":"Carlos Mairena","header_description":"Connects to LDAPS to display an employee directory from an OU. Supports Elementor, Beaver Builder and a native shortcode.","assets_banners_color":"","last_updated":"2026-03-17 17:12:05","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/wordpress.org\/plugins\/ldap-staff-directory\/","header_author_uri":"https:\/\/carlosmmairena.com","rating":5,"author_block_rating":0,"active_installs":0,"downloads":177,"num_ratings":1,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.6":{"tag":"1.0.6","author":"carlosmmairena","date":"2026-03-17 17:12:05"}},"upgrade_notice":{"1.0.6":"

The custom CSS textarea in the admin panel and the Beaver Builder Advanced tab have been removed. To style the directory, use CSS custom properties (--ldap-primary-color<\/code>, --ldap-card-bg<\/code>, --ldap-columns<\/code>, etc.) in your theme's stylesheet instead.<\/p>","1.0.0":"

Initial release \u2014 no upgrade steps required.<\/p>"},"ratings":{"1":0,"2":0,"3":0,"4":0,"5":1},"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3485004,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3485004,"resolution":"256x256","location":"assets","locale":""}},"assets_banners":[],"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.6"],"block_files":[],"assets_screenshots":[],"screenshots":{"1":"Admin settings page \u2014 connection and display options","2":"Employee directory rendered with the default style","3":"Elementor widget controls","4":"Beaver Builder module tabs"},"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[2466,76538,2464,11420,257979],"plugin_category":[],"plugin_contributors":[257980],"plugin_business_model":[],"class_list":["post-287571","plugin","type-plugin","status-publish","hentry","plugin_tags-directory","plugin_tags-elementor","plugin_tags-ldap","plugin_tags-staff","plugin_tags-wpbeaverbuilder","plugin_contributors-carlosmmairena","plugin_committers-carlosmmairena"],"banners":[],"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/ldap-staff-directory\/assets\/icon-128x128.png?rev=3485004","icon_2x":"https:\/\/ps.w.org\/ldap-staff-directory\/assets\/icon-256x256.png?rev=3485004","generated":false},"screenshots":[],"raw_content":"\n

LDAP Staff Directory<\/strong> lets you connect your WordPress site to an LDAP \/ LDAPS server and publish a public employee directory with zero manual data entry.<\/p>\n\n

Features<\/h4>\n\n
    \n
  • Connects to any LDAP or LDAPS server (including Active Directory, OpenLDAP, Samba)<\/li>\n
  • Configurable Base OU and Bind DN<\/li>\n
  • Extracts: full name, email, job title, department<\/li>\n
  • Shortcode [ldap_directory]<\/code> usable in any post, page or widget<\/li>\n
  • Native Elementor widget with full style controls<\/li>\n
  • Native Beaver Builder module with General and Style tabs<\/li>\n
  • Real-time client-side search (no page reload)<\/li>\n
  • Client-side pagination with configurable items per page<\/li>\n
  • Transient-based cache with configurable TTL and one-click invalidation<\/li>\n
  • Admin panel under Settings \u2192 LDAP Directory<\/strong><\/li>\n
  • SSL certificate verification toggle (supports self-signed certs)<\/li>\n
  • Optional CA certificate file path<\/li>\n
  • Multisite compatible (per-site settings)<\/li>\n<\/ul>\n\n

    Requirements<\/h4>\n\n
      \n
    • PHP ldap<\/code> extension enabled on the server<\/li>\n
    • WordPress 5.8 or higher<\/li>\n
    • PHP 7.4 or higher<\/li>\n<\/ul>\n\n\n
        \n
      1. Upload the ldap-staff-directory<\/code> folder to \/wp-content\/plugins\/<\/code>.<\/li>\n
      2. Activate the plugin through Plugins \u2192 Installed Plugins<\/strong>.<\/li>\n
      3. Go to Settings \u2192 LDAP Directory<\/strong> and fill in your LDAP connection details.<\/li>\n
      4. Click Test Connection<\/strong> to verify the settings.<\/li>\n
      5. Insert [ldap_directory]<\/code> in any post or page, or use the Elementor \/ Beaver Builder widget.<\/li>\n<\/ol>\n\n\n
        \n

        The plugin says \"PHP LDAP extension not found\". What should I do?<\/h3><\/dt>\n

        Contact your hosting provider and ask them to enable the php-ldap<\/code> (or php7.x-ldap<\/code>) extension. On Linux servers you can typically install it with:\n sudo apt-get install php-ldap or sudo yum install php-ldap<\/code>.<\/p><\/dd>\n

        My server uses a self-signed SSL certificate. How do I connect?<\/h3><\/dt>\n

        Go to Settings \u2192 LDAP Directory \u2192 LDAP Connection<\/strong> and uncheck Verify SSL Certificate<\/strong>. Save, then click Test Connection<\/strong>.<\/p><\/dd>\n

        How do I connect to Active Directory?<\/h3><\/dt>\n

        Use ldaps:\/\/your-dc.domain.com<\/code> as the server, port 636<\/code>, and a service account DN such as CN=svc-wordpress,OU=ServiceAccounts,DC=domain,DC=com<\/code>.<\/p><\/dd>\n

        Can I show only certain fields?<\/h3><\/dt>\n

        Yes. In the admin panel, check or uncheck the fields you want. You can also override per shortcode:\n [ldap_directory fields=\"name,title\"]<\/p><\/dd>\n

        How long is data cached?<\/h3><\/dt>\n

        By default 60 minutes. Change the TTL under Settings \u2192 LDAP Directory \u2192 Cache<\/strong> or flush immediately with the Clear Cache<\/strong> button.<\/p><\/dd>\n\n<\/dl>\n\n\n

        1.0.6<\/h4>\n\n
          \n
        • Fix: Removed custom CSS input feature (admin panel textarea and Beaver Builder Advanced tab) per WordPress.org guideline prohibiting arbitrary CSS\/JS\/PHP injection.<\/li>\n
        • Fix: Added phpcs:ignore<\/code> annotation with justification to echo do_shortcode()<\/code> output in Beaver Builder frontend template; changed per_page<\/code> shortcode argument from esc_attr()<\/code> to absint()<\/code> for correct integer escaping.<\/li>\n<\/ul>\n\n

          1.0.5<\/h4>\n\n
            \n
          • Fix: Replace inline <style><\/code> tags in Elementor widget and Beaver Builder module with wp_add_inline_style()<\/code> and Elementor's native add_render_attribute()<\/code> API to comply with WordPress.org plugin guidelines (Guideline 11 \/ wp_enqueue best practices).<\/li>\n<\/ul>\n\n

            1.0.4<\/h4>\n\n
              \n
            • Security: LDAP bind password is now encrypted at rest using libsodium (XSalsa20-Poly1305). The encryption key is derived from WordPress's built-in security keys \u2014 no configuration required.<\/li>\n
            • Security: Existing plaintext passwords continue to work and are automatically re-encrypted on the next settings save (transparent migration).<\/li>\n
            • Security: An admin notice is shown when WordPress security keys (wp-config.php) have been regenerated, prompting the administrator to re-enter the bind password.<\/li>\n
            • Note: Regenerating WordPress security keys requires re-entering the bind password once in Settings \u2192 LDAP Staff Directory.<\/li>\n<\/ul>\n\n

              1.0.3<\/h4>\n\n
                \n
              • Fix: Plugin now activates without the PHP LDAP extension; a persistent admin notice informs the administrator when the extension is missing instead of blocking activation with a fatal error.<\/li>\n
              • Fix: \/* translators: *\/<\/code> comment repositioned inside sprintf()<\/code>, immediately above __()<\/code>, to satisfy the WordPress Plugin Checker i18n rule.<\/li>\n
              • Fix: All local variables in included template files (directory.php<\/code>, beaver-builder\/frontend.php<\/code>) renamed with ldap_ed_<\/code> prefix to comply with WPCS global-variable naming requirements.<\/li>\n
              • Fix: absint()<\/code> applied to $columns<\/code> in Elementor widget printf()<\/code> output to satisfy the WPCS escaping rule for integer values.<\/li>\n
              • Fix: load_plugin_textdomain()<\/code> removed \u2014 not required for WordPress.org-hosted plugins since WordPress 4.6.<\/li>\n
              • Fix: Domain Path<\/code> header removed from plugin file \u2014 no local translation files are bundled.<\/li>\n
              • Chore: \"Tested up to\" updated to WordPress 6.9.<\/li>\n
              • Chore: Tag list reduced to five entries per WordPress.org limit.<\/li>\n<\/ul>\n\n

                1.0.2<\/h4>\n\n
                  \n
                • Feat: Added telephoneNumber<\/code> field \u2014 read from LDAP, displayed on cards as a clickable tel:<\/code> link, included in client-side search, and available in admin panel, Elementor and Beaver Builder controls.<\/li>\n
                • Feat: New \"Exclude Disabled Accounts\" setting (connection section) \u2014 filters out disabled Active Directory accounts using the userAccountControl<\/code> bit flag. Leave unchecked for OpenLDAP\/other servers.<\/li>\n
                • Feat: Resilient cache \u2014 when the LDAP server is unreachable after cache expiry, the last successfully fetched data (stale copy) is served silently to visitors. Only a manual \"Clear Cache\" action removes the stale copy entirely.<\/li>\n<\/ul>\n\n

                  1.0.1<\/h4>\n\n
                    \n
                  • Fix: LDAP server URL no longer lost on save \u2014 replaced esc_url_raw()<\/code> (which strips ldap:\/\/<\/code>\/ldaps:\/\/<\/code> schemes) with a dedicated sanitizer that validates the scheme and shows an admin error on invalid input.<\/li>\n
                  • Fix: Added runtime admin notice when the PHP LDAP extension is missing, covering cases where the extension is disabled after activation or the plugin is activated via WP-CLI\/DB without going through the activation hook.<\/li>\n<\/ul>\n\n

                    1.0.0<\/h4>\n\n
                      \n
                    • Initial release.<\/li>\n<\/ul>","raw_excerpt":"Connects to an LDAPS server and displays an employee directory from a specific OU. Supports Elementor, Beaver Builder and a native shortcode.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/287571","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=287571"}],"author":[{"embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/carlosmmairena"}],"wp:attachment":[{"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=287571"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=287571"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=287571"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=287571"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=287571"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/szl.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=287571"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}