{"id":157,"date":"2026-10-15T11:00:00","date_gmt":"2026-10-15T11:00:00","guid":{"rendered":"https:\/\/demo.alphaxp.net\/wordpress\/2026\/10\/15\/how-the-read-only-demo-account-works\/"},"modified":"2026-10-15T14:53:18","modified_gmt":"2026-10-15T14:53:18","slug":"how-the-read-only-demo-account-works","status":"publish","type":"post","link":"https:\/\/demo.alphaxp.net\/wordpress\/2026\/10\/15\/how-the-read-only-demo-account-works\/","title":{"rendered":"How the read-only demo account works"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">A plugin demo usually forces a choice: show a few screenshots, or hand strangers an administrator account and hope. This site does neither. Everyone shares one account, <code>demo<\/code>, and that account sees every screen of every plugin while being unable to change anything. Here is what it can and cannot do.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Everything is visible<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Alpha plugins check one shared capability before showing their screens. On this site that capability is granted to administrators and to the demo account, so the demo sees the same menus, tabs, tables and charts an owner would. The data behind them is real sample data: monitors that really run, firewall events that really happened, emails that really went through the mail log.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Nothing can be changed<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Reads only.<\/strong> Each plugin&#8217;s actions are sorted into reads and writes. The demo account may call the reads; any save, send, import or delete answers <em>&#8220;Locked in the demo&#8221;<\/em>.<\/li>\n\n\n\n<li><strong>REST is read-only too.<\/strong> Requests to a plugin&#8217;s REST API from the demo account may only <code>GET<\/code>.<\/li>\n\n\n\n<li><strong>No outgoing mail.<\/strong> Unless an administrator is acting, email is recorded and dropped, so a demo visitor can never make the site send anything to anyone.<\/li>\n\n\n\n<li><strong>Private details are masked.<\/strong> Email addresses, IP addresses, licence keys, API keys, tokens and phone numbers are blurred in everything the demo account receives.<\/li>\n\n\n\n<li><strong>The code editor shows themes only.<\/strong> CodeForge opens any file under <code>themes\/<\/code>; plugin source stays private, because that is what the store sells.<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Signing in<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n<li>URL: <a href=\"https:\/\/demo.alphaxp.net\/wordpress\/wp-admin\/\">https:\/\/demo.alphaxp.net\/wordpress\/wp-admin\/<\/a><\/li>\n\n\n\n<li>User: <code>demo<\/code><\/li>\n\n\n\n<li>Pass: <code>FolderPressDemo1<\/code><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">The sign-in page shows the same details with a button that fills them in. The <em>Try it<\/em> buttons on each plugin take you to that plugin&#8217;s screen; sign in once and you land right on it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">And every night, a clean slate<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Once a day the database, the uploads and each plugin&#8217;s private store are restored from a snapshot. Whatever happened during the day is gone, and the demo looks exactly as it did the morning before.<\/p>\n\n","protected":false},"excerpt":{"rendered":"<p>One shared account sees every screen of every plugin and can change nothing. What it can see, what is switched off, and how it resets.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_ai_seo_title":"","_ai_seo_desc":"","_ai_focus_kw":"","footnotes":""},"categories":[17],"tags":[],"class_list":["post-157","post","type-post","status-publish","format-standard","hentry","category-guides"],"_links":{"self":[{"href":"https:\/\/demo.alphaxp.net\/wordpress\/wp-json\/wp\/v2\/posts\/157","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/demo.alphaxp.net\/wordpress\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/demo.alphaxp.net\/wordpress\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/demo.alphaxp.net\/wordpress\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/demo.alphaxp.net\/wordpress\/wp-json\/wp\/v2\/comments?post=157"}],"version-history":[{"count":1,"href":"https:\/\/demo.alphaxp.net\/wordpress\/wp-json\/wp\/v2\/posts\/157\/revisions"}],"predecessor-version":[{"id":164,"href":"https:\/\/demo.alphaxp.net\/wordpress\/wp-json\/wp\/v2\/posts\/157\/revisions\/164"}],"wp:attachment":[{"href":"https:\/\/demo.alphaxp.net\/wordpress\/wp-json\/wp\/v2\/media?parent=157"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/demo.alphaxp.net\/wordpress\/wp-json\/wp\/v2\/categories?post=157"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/demo.alphaxp.net\/wordpress\/wp-json\/wp\/v2\/tags?post=157"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}