Module description
Limit access to your storefront to customers who are already signed in. Visitors see a dedicated login page instead of the usual catalog pages, product descriptions and prices.
Features
- Private storefront for logged-in customers
- Existing PrestaShop customer accounts
- Customizable welcome title and message
- Store logo and editable background image
- Optional forgotten-password contact panel (no automated reset)
- Native front-office registration restricted while private mode is enabled
- Responsive login page and simple back-office configuration
Suitable for
B2B stores, wholesalers, dealer-only catalogs and customer-only storefronts.
Login security and access protection
Version 1.0.0 includes additional safeguards for the module’s own login form: POST-only password submissions, a session token check, input validation, and a limit of 12 failed attempts within 15 minutes per network address. Redirects after login are restricted to the shop. Back-office configuration changes are also guarded by employee-session checks and a CSRF token.
The module automatically creates a small PrestaShop database table for failed-login counters. This table stores a cryptographic fingerprint of the IP address scoped to the shop, not the plaintext IP address or the password. If the rate-limiting storage is unavailable, the private login form rejects authentication as a precaution. Users sharing a public IP address may share the same attempt counter.
These protections apply to this module’s login form, not necessarily to other PrestaShop login routes, APIs or third-party modules.
Updating an existing installation
If version 1.0.0 is already installed, replace the module files without uninstalling, then open its back-office configuration to initialize the attempt-tracking table and check the registration-blocking hook. Test with an existing customer account before production use. No manual SQL import is required for installation in PrestaShop.
Compatibility
Designed for PrestaShop 9.x. Test on your exact installation before production use. Not advertised for PrestaShop 1.7 or 8.
Important access limits
This module restricts standard front-office pages but does not protect files directly served by the web server, such as images, PDFs and other static assets. API endpoints and third-party modules may need separate checks. Do not rely on it alone for highly confidential data.
Custom development
For additional restrictions or changes, contact Concepty.
*The visuals on this page are based on real module screenshots from a test PrestaShop installation.*