The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
0answers
20 views

Using google reCaptcha without a plugin

Wordpress noob here wondering how to include reCaptcha authentication in my login without a plugin? So far I have added the captcha div into the login using a hook: add_action('login_form','...
0
votes
1answer
533 views

Single sign-on: wp_authenticate_user vs wp_authenticate

I have a wordpress site (lets call it site1) and another site with oauth2 (site2). When a new user is created, a record is created in both site1 and site2 databases with the same email as username, ...
0
votes
1answer
22 views

How are readers authenticated for leaving comments?

I'm thinking of creating a WordPress blog, not on WordPress.com but just using WordPress on a hosted website. I would like to allow comments on the blog, but was wondering in what way are commentators ...
5
votes
1answer
287 views

how to authenticate for the REST API from a plugin and from command line

I want to try the new REST API but I'm not used to this kind of things. Basically, I want to use it to GET custom posts via ajax and show on the website frontend (I'm building an ajax product ...
0
votes
1answer
26 views

throttle/limit a logged in user's http requests to specific page on a per day basis

I have a resource on my WordPress page that I only want to show X times per day per logged in user. I'm using the twenty sixteen WordPress theme. Currently, Guests / visitors / non logged in users ...
1
vote
6answers
7k views

How do I require authorization / login to view a specific set of posts / pages?

I am working on a wordpress site for a client who wants an internal 'intranet' for his employees. The basic needs are: Communicate things in-house House important company documents Provide quick ...
0
votes
1answer
126 views

Using JWT to authenticate a user with an external system?

We have a WordPress application which is going to be linked with a parent system. We want to use JWT for authenticating with the parent. The idea is, if the user is not logged in on the parent, he ...
0
votes
3answers
871 views

FTP Username and password wrong while installing theme

I followed Failed to connect to FTP Server 127.0.0.1/:21 And was able to solve that problem. But now when I try to upload the theme then I get username and password failure. I have added following ...
1
vote
0answers
9 views

Is it safe to save a cookie in my mobile app internal memory and use it for further authentications?

I am planning to generate an authentication cookie with the JSON API and save it in my app memory with : https://example.com/api/user/generate_auth_cookie/?nonce=+4d080ff7b8&email=user@gmail.com&...
4
votes
2answers
545 views

Override user authentication with external credentials

I'm working on a site running WordPress along with a vBulletin forum. The user base is registered on vBulletin. I need to allow users to appear logged in on WordPress as well for the sole purpose of ...
0
votes
0answers
156 views

Logged In cookie gets saved but not Auth cookie

I am trying to get WordPress to run on PHP-CGI which I call from my ExpressJS (Node JS) server. After getting some bugs worked out on my end, I finally got the front-end working. I can login and the ...
1
vote
1answer
315 views

JWT authentication with WP - Approach

We're using JWT (JSON Web Token) for authenticating our WordPress application with an external service. The current flow we're thinking of is like this: The user signs in on the the parent site The ...
0
votes
0answers
15 views

add_rewrite_rule to fix fastcgi issue with basic AUTH

The issue is that $_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW'] are not populated if PHP is running CGI/FastCGI as the server API. I've read there is a possible fix with this through htaccess ...
0
votes
0answers
23 views

Wordpress Authentication without Wordpress functionality

The requirement is to authenticate against the WordPress users tables to get past the paywall but not offer any WordPress functionality. The problem to resolve is that since the user is ...
0
votes
1answer
19 views

Where is the php file, that does the checks for login information?

I would like to add some additional checks into my wordpress website's username and password authentication function for specific usernames, but I cannot find the correct php file... /* I would like ...
4
votes
3answers
6k views

Adding extra authentication field in login page

I am going to enhance my WordPress authentication page. My idea is that simply adding an extra field into the login page. The extra field will require user to enter personal identification code (4 to ...
3
votes
5answers
2k views

Wordpress auto login after registration not working

So I looked up a bunch of threads trying to figure out how to automatically log a user in after registration, and came up with this. function log_me_the_f_in( $user_id ) { $user = get_user_by('id'...
1
vote
0answers
74 views

How do I authenticate WP users from a chrome extension?

I'm new to WordPress, and I need help. I am writing a chrome extension and intend to use wordpress as the user database. I intend that because I'm using a subscription management WP plugin that keeps ...
0
votes
1answer
32 views

Detect if authentication is set to “remember” a user being logged on

I am writing a custom frontend logon page for a theme I am working on. The logon page uses wordpress functions as much as possible (eg., wp_signon, wp_set_auth_cookie, ...etc.). For logging on, I do ...
1
vote
0answers
30 views

Authenticate with a Rails app?

There seems to be lots of posts where another app / website uses a WP website to authenticate against. I am looking for the opposite. I have a Rails app that uses Devise for authentication. I have a ...
3
votes
1answer
44 views

Keep Users Logged In As Long As I Like

I'm implementing a Kiosk webapp based off WordPress and I have some conditionals which are key, they work based on whether user is logged in or not. I'm aware that after user clicks "remember me" it ...
-1
votes
0answers
27 views

Handling user logins on the front and back end

I'm currently working on a site which has 2 areas where users can log in. One on the front end for BuddyPress and the standard login area (wp-login.php). As It stands whenever validation for the ...
0
votes
1answer
32 views

Where is function to prevents non logged users access wp-admin?

Where is the function, that prevents non logged users, access restricted pages in Wordpress? I've looked in several files, but not found. I want to modify the way Wordpress authenticates to check ...
0
votes
1answer
22 views

Users are required to login to my site. How define user.member boolean, its permissions, and conditionally display/handle behavior based on it

Users are required to login to my site. They are redirected to the login page and not allowed past the login page until they authenticate. Once authenticated, they can access most of the website. ...
0
votes
0answers
19 views

Wordpress LDAP Authentication

I want to authenticate user using LDAP authentication for my WordPress website. I need to authenticate every page of the website but not the backend (wp-admin) of the site. Could anyone suggest a ...
1
vote
2answers
87 views

External system integration with wordpress

I'm writing a web/db application. My clients would like authentication based on whether the user is logged into WordPress. Assuming this application is hosted from within /wordpress I would like to ...
0
votes
1answer
1k views

WP-API and Basic Auth returning 403 on POST but not GET

I am using the latest, WP-API and the recommended Basic Auth, to test adding a post to WP from remote. I have Access Headers opened up on the WP side: header("Access-Control-Allow-Origin: *"); ...
0
votes
0answers
214 views

Authentication for a mobile app connected via wp-rest api?

Building a cordova (HTML/JS) based mobile app (not-native) and I want to use wordpress only as the backend. The idea is that mobile app users will be making requests to the API and custom endpoints ...
0
votes
2answers
28 views

Wordpress Child Theme Template auth_redirect wrapper

I'm successfully utilizing a child theme in Wordpress. I would like to create a page template that simply forces login for any visits to the pages where this template is in use. (Simply need to add &...
2
votes
1answer
333 views

How do I use the WP REST API plugin and the OAuth Server plugin to allow for registration and login?

Are there any example projects that do the same? I want to be able to login and register for accounts on my site via the API.
0
votes
1answer
341 views

Users credentials and syncing from third party with WooCommerce

I am trying to build a web store for a client who has already had a mobile app. the mobile app team would like to sync user's password as they update it both on the mobile app and the web store. ...
3
votes
3answers
2k views

Using `auth_redirect` : keeps asking me to login even when I'm logged in

I am trying to use auth_redirect to automatically redirected not logged-in visitors when then visit a specific page. Here is the code I use: add_action('template_redirect','...
0
votes
1answer
38 views

OAuth 2 and saving the authenticated user

I have quite a peculiar scenario. I have one WordPress site (Site A) where I have a large amount of users that have registered and I use the s2member plugin to subscribe these members to allow access ...
3
votes
1answer
124 views

How does ifttt.com authenticate a supplied WordPress account

I'm curious to know how ifttt.com authenticate a supplied WordPress admin login credentials. And after authorization is granted, how does it publish post on our behalf? am curious to know what ...
1
vote
0answers
135 views

WP set auth cookie using Ajax is not saved to browser

We are creating an external dashboard that uses Wordpress data, obviously, we use WP REST API v2 We want total separation from the traditional WP Dashboard, but we also want to log in user "behind ...
0
votes
0answers
142 views

How do I establish a connection between Firebase user database and WordPress?

I'm making a Website and an android app. The android app stores its user details i.e., username and password on Firebase database; I'm also making a website and I want a login in the website which ...
0
votes
2answers
2k views

How to secure or disable the RSS feeds?

I'm trying to set up WordPress as a CMS. As such, I want to disable the feeds since it's mostly a secured site. I've gone through all the Settings pages but found no setting to tweak or disable the ...
1
vote
0answers
33 views

What is best way to prevent access to Custom Post Types unless authenticated when the post type has an archive and is publicly queryable?

What is best way to prevent access to Custom Post Types unless authenticated when the post type has an archive and is publicly_queryable? Is code below enough to keep the content secure and prevent ...
0
votes
0answers
24 views

How to track all users logged into a site?

I'm working on a project that may have two or three content creators. I would like to be able to notify any of them if the other(s) are logged in. This is to prevent one user from editing a post that ...
0
votes
1answer
142 views

What WP-API authentication method should I use to interact with anonymous / not-logged visitors?

I am going to track number of plays of a video in my site by both visitors and users. Whenever the video starts playing I am using JavaScript for the event handling in the frontend and write to ...
1
vote
1answer
80 views

How to display username and password after registration

When a new user registers for a new account, WordPress sends an email with the login information as usual. The password is auto-generated and stored securely in the WP database and the registration is ...
2
votes
0answers
374 views

Authenticated request to WP REST API V2 returning 403 error on /users/me [closed]

I am using WP REST API Version 2.0-beta7 together with WP OAuth Server version 3.1.91 After authenticating with the User Credentials grant type, a request to /wp-json/wp/v2/users?access_token=[...
0
votes
1answer
37 views

`authenticate` filter never gets called

I've added and network activated a plugin with this code: add_filter('authenticate', 'my_authenticate', 1000, 2); function my_authenticate($user, $username){ // We never arrive in this function ...
0
votes
0answers
53 views

Is it possible to login in with a token rather than login credentials?

I'm working on an application that connects to a WordPress blog. Right now, the user logins in through the app. But there are times when they need to login to the website. I would like to make it easy ...
0
votes
1answer
42 views

Authenticate WordPress Site through another WordPress installation?

We have two different WordPress websites for our clients. Both have different content that need to be on separate installations. One installation already has all of our users since it existed well ...
1
vote
1answer
43 views

How to leverage authentication outside of WordPress?

I have a situation where I would like to authenticate against the WP_users table from outside of WP. Basically I have username and password fields on a static php page outside of wordpress and need ...
0
votes
0answers
24 views

How WordPress handles multisite login?

I want to know how WordPress handles multisite login. How exactly it is saving session/cookies of the authenticate user? Actually, I am facing issue with WordPress Social Login plugin. When I logged ...
2
votes
1answer
519 views

How can I use CURLOPT_USERPWD in wp_remote_post?

I'm trying to setup a proper cURL call in WordPress so am using wp_remote_post(). However, I'm having trouble authenticating the user via wp_remote_post(). Any idea how to convert the following to be ...
0
votes
1answer
156 views

I want login using email not username wordpress front end

For the login, I want to enable the user to use the email instead of the username. This is what I got so far: remove_filter('authenticate', 'wp_authenticate_username_password', 20); function ...
0
votes
0answers
38 views

Anonymous sessions in WordPress?

I want to start a session for a non-registered user. The information for the user will be sent to me via a token. The only purpose is to restrict page access if the user is not signed in on the parent ...