LeBase64URL

LeBase64URL converts external links in WordPress post content into signed redirect URLs. Visitors leave your site through a controlled jump page (or a direct 302), which helps with link management and reduces open-redirect abuse.

Default redirect format

https://example.com/?goto=TOKEN

No files are written to the WordPress root directory. Tokens use Base64URL encoding plus an HMAC signature (Base64 is encoding, not encryption).

Features

• Convert article external links to signed ?goto= redirect URLs
• Optional intermediate warning page or direct redirect
• Domain whitelist (exact domain and subdomains)
• Optional nofollow and target="_blank" (with noopener noreferrer)
• Optional: skip conversion for logged-in administrators
• Pretty permalink option: /go/TOKEN

Privacy

This plugin does not phone home, does not load remote scripts, and does not collect personal data. Redirect tokens are generated and verified locally using WordPress salts.

Documentation

Plugin introduction: https://www.lezaiyun.com/lebase64url.html