The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
2answers
28 views

My custom page template with is_user_logged_in() does not detect that I'm logged in

I have a custom page template that looks like this: <?php if( is_user_logged_in() ): ?> <?php get_header(); ?> <?php while ( have_posts() ) : the_post(); ?> <?php ...
-1
votes
2answers
459 views

How can I have authenticated WordPress users automatically sign into Moodle?

Okay, so here's the deal. I'm looking for a way to log people into Moodle using their WordPress credentials, with this kind of workflow: User "bbarker" is logged into WordPress. He clicks a link that ...
1
vote
0answers
20 views

How do I use the WP REST API plugin and the OAuth Server plugin to allow for registration and login?

Are there any example projects that do the same? I want to be able to login and register for accounts on my site via the API.
0
votes
0answers
18 views

WordPress Authentication loop using custom plugin

My client has an authentication provider with a good API. I have some classes for checking whether a user is logged in to this provider - it sets an encrypted cookie with the user's email address, I ...
0
votes
1answer
510 views

FTP Username and password wrong while installing theme

I followed Failed to connect to FTP Server 127.0.0.1/:21 And was able to solve that problem. But now when I try to upload the theme then I get username and password failure. I have added following ...
3
votes
2answers
494 views

Override user authentication with external credentials

I'm working on a site running WordPress along with a vBulletin forum. The user base is registered on vBulletin. I need to allow users to appear logged in on WordPress as well for the sole purpose of ...
1
vote
1answer
16 views

What's hook to use immediately after a user is authentcated [duplicate]

Does anyone know the add_action() hook to use immediately after a user is successfully authenticated. Hook Test based on @mmm's answer I ran this test from my mu-plugins.php file: function ...
0
votes
0answers
19 views

Google Authenticator does not accept the verification code

I have two-factor authentication enabled on my blog and cannot log in. I get a WordPress verification code, but the number always generates an when I use it. ERROR: Invalid verification code ...
3
votes
1answer
58 views

How do you import members from another system to Wordpress and update passwords so they'll work?

Our current system ( not using Wordpress ) has 1000s of users that we need to port over to Wordpress. The problem we're running into is that the passwords can't stay the same. In our current system ...
0
votes
1answer
23 views

Custom user creation and auto login problem

I am trying to create a custom user and then log them in programatically, whereafter I want to redirect them to a payment page. I have the following code in my theme's functions.php file: function ...
0
votes
1answer
21 views

Password Protected Page + Showing Different Page If Not Authenticated/Authorized

I have a few pages of custom posts that I would like to password protect via the following business rules: I can create a number of passwords to access the page An expiration date can be set for ...
0
votes
0answers
19 views

Multisite LDAP authentication

I'm currently working on using LDAP authentication for my Wordpress 4.2.2 multisite. So far I've come across a couple of plugins but I'd like to map roles using groups in LDAP for each site in ...
1
vote
0answers
19 views

two factor authentication

i am working on a two factor authentication plugin using a third party API. API and WordPress plugin setting page are ready. now i need break default wp login process in two parts like this: This is ...
0
votes
1answer
10 views

Opening protected page with cookie?

I'm working on an app that uses WordPress for user management. After login, the app holds the auth cookie. How can I use that cookie to open a web view of a protected page within the app without ...
0
votes
1answer
28 views

Multisite authorization error 401

I have created a site on my wordpress network , but when I tried to access the site or dashboard it asks for username and password . Though I didn't create any authorization password (http pass) for ...
0
votes
1answer
28 views

Reloading page with a query string upon login for admins

After users with specific roles log in, I would like to reload the current page with a query string added (to trigger a message via JavaScript). How can this be improved? function ...
0
votes
1answer
445 views

Need to execute a cron job

I need a cron job to execute the following url http://www.mywebsite.com/wp-admin/admin.php?page=myvideoblog/mvb_main.php&action=processfeed&updatefeed=67 The problem is that it requires ...
9
votes
4answers
10k views

Can I programmatically login a user without a password?

I'm manually creating users programmatically, and I want to sign in the newly created user. WP makes it easy to access the hashed password, but not the plaintext version. Is there a way to use ...
2
votes
3answers
875 views

Wordpress auto login after registration not working

So I looked up a bunch of threads trying to figure out how to automatically log a user in after registration, and came up with this. function log_me_the_f_in( $user_id ) { $user = ...
1
vote
0answers
112 views

How does the “authentication unique keys and salts” feature work?

I'm trying to find some information on how the authentication keys and salts work in WordPress, but unfortunately I wasn't able to find anything useful. All I got is that the keys should be random, ...
1
vote
0answers
68 views

wordpress 3.9 remote token auth

I came across the following code here <?php /* Plugin Name: Remote Login Description: Log into the site with creds that work on remote site (as defined in plugin). The remote site must have ...
0
votes
1answer
180 views

Single sign-on: wp_authenticate_user vs wp_authenticate

I have a wordpress site (lets call it site1) and another site with oauth2 (site2). When a new user is created, a record is created in both site1 and site2 databases with the same email as username, ...
4
votes
1answer
186 views

Extend Wordpress (4.x) session and nonce

We've got a small web application that allows users to log in (via WordPress) and remain logged in for a max 15 min session for security purposes. Because most sessions will last longer, I have a ...
0
votes
0answers
108 views

Custom user authenticate with custom user table and function wp_authenticate

How can I authorize a user using the built-in functions for working with wp cookies. I try to explain. I create custom db table for my users such as: CREATE TABLE IF NOT EXISTS `my_users` ( `ID` ...
0
votes
0answers
29 views

Authenticate Login / Problem when user is created

// check active status (login) add_filter( 'wp_authenticate_user', 'check_active', 30, 3 ); function check_active( $user, $username) { global $current_user,$wpdb; $user_info = get_user_by( 'login', ...
0
votes
0answers
109 views

Site requires login. How to publish login-free RSS feed?

The WordPress site is for internal use only and as such I've set it up so it requires users to be logged in before they can see any of its pages. As a result, my RSS feed url won't work without ...
1
vote
4answers
574 views

current_user_can not always working properly

I have a custom Wordpress theme that includes a members only section. In order to implement this, I have the following code at the top of my restricted pages. <?php if ( ! current_user_can ...
1
vote
2answers
147 views

Wordpress asking for FTP details when installing plugins

I'm renting a server from DigitalOcean on which I'm running Wordpress inside apache on port 8079. DigitalOcean also only allows one to connect via SFTP. Currently the client I use to do that is ...
6
votes
5answers
8k views

How to validate a user from ouside wordpress/php?

I'm working on an ajax application that will be embedded in a wordpress page. The ajax app exchanges data with servlets running on tomcat. Now the servlets need a way to determine if a request comes ...
0
votes
0answers
22 views

Restrict access to the site with $ _SESSION

I am creating a simple login system that redirects a client for your area . There will contain links to their projects , in other words , clicking , it will be redirected to your website. Example: I ...
0
votes
0answers
35 views

Wordpress Users Authentication through Drupal

I develope a Wordpress Site. A customer of mine had a Drupal installation, where he has installed the following plugin: https://www.drupal.org/project/oauthloginprovider Now I want my WP users to be ...
3
votes
1answer
170 views

Authentication / login mechanism (non wp-admin)

I am developing a theme. I need to have a user login system, that allows users to see all contents of the application and interact with it only after they login (not admin panel login). I need to ...
0
votes
0answers
35 views

WordPress accepting log ins with blank password and incorrect passwords

I'm working on someone's WP site and one of the bugs they have is that as long as the user is registered and exists in the wp_users table they can log in to the site without entering a password or ...
0
votes
1answer
1k views

Custom Login Form - Redirect user to login page if not logged in

I have integrated custom login form as mentioned here and embed this custom login form to a WordPress page, via shortcode [dm_login_form]. After that I have integrated access control plugin here ...
0
votes
0answers
45 views

Admin toolbar not showing right after `wp_signon`

I'm implementing a login wall using the template_include filter and a is_user_logged_in() conditional check. I authenticate new logins inside the same hooked function using wp_signon(): add_filter( ...
0
votes
0answers
80 views

Can users signup via the new REST API

I am building a mobile app that is a companion to a Wordpress site and will be retrieving and submitting data via a WP plugin built using the new REST API. Users will need to be able to create ...
0
votes
0answers
43 views

New Wordpress plugin - authentication is needed

I write a new plugin that will work against an external application. This application need an access to this plugin, and will create, edit and delete posts. Of course I want to protect the plugin so ...
0
votes
0answers
128 views

Usage of wp_send_json_success and wp_redirect at the same time

I have to send the success response to ajax if user filled the form fields successfully or not on the client side and redirect to the other page which finalize his authorization at the same time on ...
0
votes
0answers
284 views

Override wp_authenticate

I'm overriding the wp_authenticate pluggable function. But I've two errors: PHP Warning: Missing argument 2 (This argument is $password) PHP Notice: Undefined variable: password The code is as ...
0
votes
1answer
122 views

Wordpress Authentication Middleware

What I want to achieve is: For every request , if the user is not logged he / she will be redirected to the log in page. If the user is logged in then he / she can access the site. class Auth{ ...
0
votes
0answers
73 views

Get User data from external site

I would like to pull user data into a mobile app. I would create a simple login in the app and send the username and password to my wordpress site. The site would authenticate the user and return user ...
0
votes
1answer
136 views

Calling wp_signon doesn't log the user in

I'm currently programming a single sign-on mechanism for my Wordpress site to allow my company's helpdesk system to authenticate against Wordpress. In order to allow this to happen I'm making use of ...
1
vote
1answer
1k views

Error when requesting password reset email - wp authentication

I get the following error whenever a user tries to request a password reset email: The e-mail could not be sent. Possible reason: your host may have disabled the mail() function. As per ...
0
votes
1answer
995 views

How to secure or disable the RSS feeds?

I'm trying to set up WordPress as a CMS. As such, I want to disable the feeds since it's mostly a secured site. I've gone through all the Settings pages but found no setting to tweak or disable the ...
3
votes
1answer
323 views

Security error WP 4.0 + WP phpBB Bridge [closed]

so today I updated to 4.0 (glad I had backup). Everything was working fine until I tried to publish a post. There I got Are you sure you want to do this. Also had Cheatin' Uh under ...
0
votes
1answer
31 views

How to add additional factor to wordpress authentication

The specific idea is to tie a user to a specific IP address. At login time set a cookie with the IP address of the user and then check it against the address from which it is being sent from at every ...
1
vote
0answers
129 views

WordPress Multisite logout conflict

I have a WordPress Multisite setup with several sub sites. I am having an issue when logging out of one of the sub sites that leaves the user logged into the main site which was the entry point or ...
3
votes
2answers
1k views

Using `auth_redirect` : keeps asking me to login even when I'm logged in

I am trying to use auth_redirect to automatically redirected not logged-in visitors when then visit a specific page. Here is the code I use: ...
0
votes
1answer
136 views

How can LDAP/Active Directory be integrated in WordPress?

I know there are a few plugins. I need to more than likely roll my own. But, I don't know enough about the WP security infrastructure. Where does WP authorization and authentication code go? I'm ...
1
vote
2answers
1k views

Are there ways of logging in that bypass wp-login.php altogether?

I have a WP install that's been getting hammered the last couple days by brute force login attempts. The site has the Limit Login Attempts plug-in installed. And when I started getting frequent ...