Title: Melmium
Author: Takashi Ito
Published: <strong>Abril 5, 2026</strong>
Last modified: Abril 5, 2026

---

Search plugins

![](https://s.w.org/plugins/geopattern-icon/melmium.svg)

# Melmium

 By [Takashi Ito](https://profiles.wordpress.org/itokuchen/)

[Download](https://downloads.wordpress.org/plugin/melmium.1.0.3.zip)

 * [Details](https://bal.wordpress.org/plugins/melmium/#description)
 * [Reviews](https://bal.wordpress.org/plugins/melmium/#reviews)
 *  [Installation](https://bal.wordpress.org/plugins/melmium/#installation)
 * [Development](https://bal.wordpress.org/plugins/melmium/#developers)

 [Support](https://wordpress.org/support/plugin/melmium/)

## Description

Melmium provides custom authentication pages for building a membership site on WordPress.
It replaces the default wp-login.php flow with theme-integrated pages for registration,
login, and password reset.

**Features:**

 * Custom authentication pages (register, login, logout, password reset)
 * Email-based registration flow with token verification
 * Template override support — customize templates in your theme’s `auth/` directory
 * Google reCAPTCHA Enterprise integration (optional)
 * Configuration via `wp-config.php` constants (no settings page required)

**日本語:**

Melmium は WordPress で会員制サイトを構築するためのプラグインです。カスタム認証ページ（
会員登録・ログイン・パスワードリセット）を提供し、テーマ側でテンプレートを自由に
カスタマイズできます。

### External Services

This plugin optionally connects to the **Google reCAPTCHA Enterprise** service for
bot detection on authentication forms (registration, login, and password reset).

**When data is sent:** When the `MELMIUM_RECAPTCHA_ENABLED` constant is set to `
true` in `wp-config.php`, a reCAPTCHA token is sent to Google’s servers each time
a user submits an authentication form.

**What data is sent:** The reCAPTCHA token generated by the user’s browser and the
site key configured for your project.

**Service provider:** Google LLC

 * [Google reCAPTCHA Terms of Service](https://policies.google.com/terms)
 * [Google Privacy Policy](https://policies.google.com/privacy)

If reCAPTCHA is not enabled (default), no data is sent to any external service.

## Installation

 1. Upload the `melmium` folder to the `/wp-content/plugins/` directory, or install
    the plugin through the WordPress plugins screen.
 2. Activate the plugin through the “Plugins” screen in WordPress.
 3. Ensure that **Pretty Permalinks** are enabled (Settings > Permalinks — choose any
    structure other than “Plain”).
 4. The plugin automatically creates an authentication page and registers URL rewrite
    rules on activation.
 5. Optionally, add configuration constants to your `wp-config.php` to customize behavior(
    e.g., `MELMIUM_RECAPTCHA_ENABLED`, `MELMIUM_REDIRECT_AFTER_LOGIN`).

## FAQ

### Is this plugin free?

Yes. Melmium is free and open-source under the GPLv2 license.

### Does this plugin send data to external servers?

By default, no. However, if you enable Google reCAPTCHA Enterprise (`MELMIUM_RECAPTCHA_ENABLED`),
form submissions will send data to Google’s reCAPTCHA API for bot detection.

### Why do I need Pretty Permalinks?

Melmium uses WordPress rewrite rules to map authentication URLs (e.g., `/login`,`/
register`). These rules require Pretty Permalinks to be enabled. The plugin will
display an admin notice if Plain permalinks are detected.

### How do I customize the authentication templates?

On activation, the plugin copies default templates to your theme’s `auth/` directory.
You can edit these template files directly in your theme to customize the look and
behavior of each authentication page.

## Reviews

There are no reviews for this plugin.

## Contributors & Developers

“Melmium” is open source software. The following people have contributed to this
plugin.

Contributors

 *   [ Takashi Ito ](https://profiles.wordpress.org/itokuchen/)

[Translate “Melmium” into your language.](https://translate.wordpress.org/projects/wp-plugins/melmium)

### Interested in development?

[Browse the code](https://plugins.trac.wordpress.org/browser/melmium/), check out
the [SVN repository](https://plugins.svn.wordpress.org/melmium/), or subscribe to
the [development log](https://plugins.trac.wordpress.org/log/melmium/) by [RSS](https://plugins.trac.wordpress.org/log/melmium/?limit=100&mode=stop_on_copy&format=rss).

## Changelog

#### 1.0.3

 * Renamed JavaScript global variables to use `melmium_` prefix to avoid conflicts
   with other plugins

#### 1.0.2

 * Fixed reCAPTCHA library script version argument (null to MELMIUM_VERSION)
 * Fixed Plugin Check reported issues
 * Improved .DS_Store exclusion pattern to cover all subdirectories

#### 1.0.1

 * Security improvements: added nonce verification, input sanitization, and output
   escaping
 * Added direct file access protection to template files
 * Added third-party service disclosure for Google reCAPTCHA Enterprise
 * Renamed constants and classes to use `melmium` prefix (4+ characters)

#### 1.0.0

 * Initial release

## Meta

 *  Version **1.0.3**
 *  Last updated **3 dies ago**
 *  Active installations **Fewer than 10**
 *  WordPress version ** 6.9 or higher **
 *  Tested up to **6.9.4**
 *  PHP version ** 8.1 or higher **
 *  Language
 * [English (US)](https://wordpress.org/plugins/melmium/)
 * Tags
 * [authentication](https://bal.wordpress.org/plugins/tags/authentication/)[login](https://bal.wordpress.org/plugins/tags/login/)
   [membership](https://bal.wordpress.org/plugins/tags/membership/)[password reset](https://bal.wordpress.org/plugins/tags/password-reset/)
   [registration](https://bal.wordpress.org/plugins/tags/registration/)
 *  [Advanced View](https://bal.wordpress.org/plugins/melmium/advanced/)

## Ratings

No reviews have been submitted yet.

[Your review](https://wordpress.org/support/plugin/melmium/reviews/#new-post)

[See all reviews](https://wordpress.org/support/plugin/melmium/reviews/)

## Contributors

 *   [ Takashi Ito ](https://profiles.wordpress.org/itokuchen/)

## Support

Got something to say? Need help?

 [View support forum](https://wordpress.org/support/plugin/melmium/)