WordPress Development Stack Exchange is a question and answer site for WordPress developers and administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using a plugin modified for my purposes.

What I am after is after the user has registered for it to automatically log them in and return them to the current page. At the moment it sends them an email with their username and password. They then have to log in using those details.

share|improve this question
are you using the default register form or a custom one? – Bainternet Feb 9 '11 at 18:46
A custom one but it is based on redirects so codes designed to work with the default system may well work, and if not I can probably modify it to. – Robin I Knight Feb 9 '11 at 18:57
I think I should point out that automatically logging in a user at registration circumvents part of login security. Ordinarily, a user cannot login without providing a valid email address. The user needs to register, receive an email, then login. If you remove the email step, your users could register with fake addresses, be automatically logged in, and be able to get to the backend, comment, whatever your default subscribers can do. Who would benefit? Spammers, for one. Hackers would also love to poke around for holes in your backend without having to give an address that could be revealing. – s_ha_dum May 26 '13 at 23:08

Basically to log a user in you can use:

            //Login the user
    $creds = array();
    $creds['user_login'] = $login;
    $creds['user_password'] = $password;
    if ( !empty( $remember ) ){ 
        $creds['remember'] = true;
    $user = wp_signon( $creds, true );

but that is only when you have the password and login so you can create your own register form and process it and create the user yourself

//Only after Everything has been validated, proceed with creating the user
        //Create the user
        $user_pass = wp_generate_password();
        $user = array(
            'user_login' => $username,
            'user_pass' => $user_pass,
            'first_name' => $firstname,
            'last_name' => $lastname,
            'user_email' => $email
        $user_id = wp_insert_user( $user );

        /*Send e-mail to admin and new user - 
        You could create your own e-mail instead of using this function*/
        wp_new_user_notification( $user_id, $user_pass );

and here we have both login and password so you can log the user in.

Hope this helps

share|improve this answer
Isn't there a registration filter that can be hooked? – Zack Feb 9 '11 at 20:30
Tricky, Ill see if I can integrate it. There is no easier way then. I take it wordpress has no interest in providing a nice convenient get_the_password() as it emails that out. – Robin I Knight Feb 9 '11 at 21:00

There's not an ideal place to hook into the registration process. I think there's a strong case to add a user registration event action hook to core. But I think you might be able to fake it, in the mean-time. One of the last things that happens when a user successfully registers, is the creation of a user option named 'default_password_nag'. We can create an action to watch for that, and set the user up when it's set.

add_action('update_user_metadata', 'my_auto_login', 10, 4);

function my_auto_login( $metaid, $userid, $key, $value ) {
    // We only care about the password nag event. Ignore anything else.
    if ( 'default_password_nag' !== $key  && true !== $value) {

    // Set the current user variables, and give him a cookie. 
    wp_set_current_user( $userid );
    wp_set_auth_cookie( $userid );

Untested, but should work, in theory.

Now that we have an idea what to do, I'll opine that I think this is a bad idea, security-wise. People can create junk accounts without even having to go through the trouble of setting up a junk email dropbox. :)

share|improve this answer
user_register is quite a nice place to hook in, for this I think? – jsims281 Sep 2 '11 at 10:28

I've just managed to get that functionality working using the user_register hook and the following code in my functions.php:

// auto log in a user who has just signed up       
function auto_login_new_user( $user_id ) {
  wp_set_auth_cookie( $user_id, false, is_ssl() );
add_action( 'user_register', 'auto_login_new_user' );
share|improve this answer
Should this still send an email to confirm the registration? I am no longer receiving this. – codecowboy Sep 27 '11 at 8:37
function login_after_register($userlogin,$userpass){
    $credentials = array( 'user_login' =>  $userlogin, 'user_password' => $userpass, 'remember' => true );

    $secure_cookie = is_ssl();

    $secure_cookie = apply_filters('secure_signon_cookie', $secure_cookie, $credentials);
    add_filter('authenticate', 'wp_authenticate_cookie', 30, 3);

    $user = wp_authenticate($credentials['user_login'], $credentials['user_password']);
    wp_set_auth_cookie($user->ID, $credentials["remember"], $secure_cookie);
    do_action('wp_login', $user->user_login, $user);
share|improve this answer
Please provide explanations along with your code. – s_ha_dum May 26 '13 at 22:47

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.