The tag has no wiki summary.

learn more… | top users | synonyms

3
votes
5answers
7k views

How to validate a user from ouside wordpress/php?

I'm working on an ajax application that will be embedded in a wordpress page. The ajax app exchanges data with servlets running on tomcat. Now the servlets need a way to determine if a request comes ...
0
votes
0answers
11 views

Restrict access to the site with $ _SESSION

I am creating a simple login system that redirects a client for your area . There will contain links to their projects , in other words , clicking , it will be redirected to your website. Example: I ...
1
vote
2answers
335 views

Wordpress auto login after registration not working

So I looked up a bunch of threads trying to figure out how to automatically log a user in after registration, and came up with this. function log_me_the_f_in( $user_id ) { $user = ...
3
votes
0answers
52 views

Extend Wordpress (4.x) session and nonce

We've got a small web application that allows users to log in (via WordPress) and remain logged in for a max 15 min session for security purposes. Because most sessions will last longer, I have a ...
0
votes
0answers
10 views

Wordpress Users Authentication through Drupal

I develope a Wordpress Site. A customer of mine had a Drupal installation, where he has installed the following plugin: https://www.drupal.org/project/oauthloginprovider Now I want my WP users to be ...
1
vote
1answer
76 views

Authentication / login mechanism (non wp-admin)

I am developing a theme. I need to have a user login system, that allows users to see all contents of the application and interact with it only after they login (not admin panel login). I need to ...
0
votes
1answer
299 views

FTP Username and password wrong while installing theme

I followed Failed to connect to FTP Server 127.0.0.1/:21 And was able to solve that problem. But now when I try to upload the theme then I get username and password failure. I have added following ...
3
votes
2answers
453 views

Override user authentication with external credentials

I'm working on a site running WordPress along with a vBulletin forum. The user base is registered on vBulletin. I need to allow users to appear logged in on WordPress as well for the sole purpose of ...
0
votes
0answers
15 views

WordPress accepting log ins with blank password and incorrect passwords

I'm working on someone's WP site and one of the bugs they have is that as long as the user is registered and exists in the wp_users table they can log in to the site without entering a password or ...
0
votes
1answer
94 views

Custom Login Form - Redirect user to login page if not logged in

I have integrated custom login form as mentioned here and embed this custom login form to a WordPress page, via shortcode [dm_login_form]. After that I have integrated access control plugin here ...
0
votes
0answers
20 views

Admin toolbar not showing right after `wp_signon`

I'm implementing a login wall using the template_include filter and a is_user_logged_in() conditional check. I authenticate new logins inside the same hooked function using wp_signon(): add_filter( ...
0
votes
0answers
29 views

Can users signup via the new REST API

I am building a mobile app that is a companion to a Wordpress site and will be retrieving and submitting data via a WP plugin built using the new REST API. Users will need to be able to create ...
0
votes
0answers
28 views

New Wordpress plugin - authentication is needed

I write a new plugin that will work against an external application. This application need an access to this plugin, and will create, edit and delete posts. Of course I want to protect the plugin so ...
0
votes
0answers
47 views

Usage of wp_send_json_success and wp_redirect at the same time

I have to send the success response to ajax if user filled the form fields successfully or not on the client side and redirect to the other page which finalize his authorization at the same time on ...
0
votes
0answers
91 views

Override wp_authenticate

I'm overriding the wp_authenticate pluggable function. But I've two errors: PHP Warning: Missing argument 2 (This argument is $password) PHP Notice: Undefined variable: password The code is as ...
0
votes
1answer
56 views

Wordpress Authentication Middleware

What I want to achieve is: For every request , if the user is not logged he / she will be redirected to the log in page. If the user is logged in then he / she can access the site. class Auth{ ...
0
votes
0answers
41 views

Get User data from external site

I would like to pull user data into a mobile app. I would create a simple login in the app and send the username and password to my wordpress site. The site would authenticate the user and return user ...
0
votes
1answer
69 views

Calling wp_signon doesn't log the user in

I'm currently programming a single sign-on mechanism for my Wordpress site to allow my company's helpdesk system to authenticate against Wordpress. In order to allow this to happen I'm making use of ...
-1
votes
2answers
224 views

How can I have authenticated WordPress users automatically sign into Moodle?

Okay, so here's the deal. I'm looking for a way to log people into Moodle using their WordPress credentials, with this kind of workflow: User "bbarker" is logged into WordPress. He clicks a link that ...
1
vote
1answer
805 views

Error when requesting password reset email - wp authentication

I get the following error whenever a user tries to request a password reset email: The e-mail could not be sent. Possible reason: your host may have disabled the mail() function. As per ...
0
votes
1answer
303 views

How to secure or disable the RSS feeds?

I'm trying to set up WordPress as a CMS. As such, I want to disable the feeds since it's mostly a secured site. I've gone through all the Settings pages but found no setting to tweak or disable the ...
3
votes
1answer
287 views

Security error WP 4.0 + WP phpBB Bridge [closed]

so today I updated to 4.0 (glad I had backup). Everything was working fine until I tried to publish a post. There I got Are you sure you want to do this. Also had Cheatin' Uh under ...
0
votes
0answers
25 views

wordpress 3.9 remote token auth

I came across the following code here https://gist.github.com/trepmal/2968439 Currently the remote authentication is token based. So when the user logs in a token is generated validating the user. ...
0
votes
1answer
26 views

How to add additional factor to wordpress authentication

The specific idea is to tie a user to a specific IP address. At login time set a cookie with the IP address of the user and then check it against the address from which it is being sent from at every ...
1
vote
4answers
334 views

current_user_can not always working properly

I have a custom Wordpress theme that includes a members only section. In order to implement this, I have the following code at the top of my restricted pages. <?php if ( ! current_user_can ...
1
vote
0answers
95 views

WordPress Multisite logout conflict

I have a WordPress Multisite setup with several sub sites. I am having an issue when logging out of one of the sub sites that leaves the user logged into the main site which was the entry point or ...
3
votes
2answers
911 views

Using `auth_redirect` : keeps asking me to login even when I'm logged in

I am trying to use auth_redirect to automatically redirected not logged-in visitors when then visit a specific page. Here is the code I use: ...
0
votes
0answers
34 views

How is a SOAP request handled when a user visits a page?

I am creating a plugin for my own website. I've been following this tutorial, but I see it's not handling authentication and displaying data in the way I'm needing, though it did show me how to ...
0
votes
1answer
75 views

How can LDAP/Active Directory be integrated in WordPress?

I know there are a few plugins. I need to more than likely roll my own. But, I don't know enough about the WP security infrastructure. Where does WP authorization and authentication code go? I'm ...
5
votes
3answers
7k views

Can I programmatically login a user without a password?

I'm manually creating users programmatically, and I want to sign in the newly created user. WP makes it easy to access the hashed password, but not the plaintext version. Is there a way to use ...
1
vote
2answers
604 views

Are there ways of logging in that bypass wp-login.php altogether?

I have a WP install that's been getting hammered the last couple days by brute force login attempts. The site has the Limit Login Attempts plug-in installed. And when I started getting frequent ...
6
votes
2answers
408 views

How to pass users back and forth using session data?

I have applications that I wrote that use SAML and then a user database to define permissions for them all. And basically once a user signs on via our SSO they can use the applications with their ...
6
votes
1answer
4k views

Create API for single sign-on with 3rd party site

My site needs to integrate with a 3rd party software, which will live on its own sub-domain, hosted by the software company. I need to provide the 3rd party developers with an endpoint that they can ...
2
votes
4answers
6k views

How to check username/password without signing in the user

I'm writing a plugin that creates an API endpoint that validates username/password pairs. I'm currently using wp_signon() to check whether the username/password combo works. This works fine when the ...
0
votes
0answers
91 views

Login from third-party application with WordPress credentials

I've made a web app with WordPress and it works great. Recently I started developing for Android. So far I've made an app with some webviews to load the correct web apps URL:S, and a menu. But now ...
2
votes
0answers
468 views

Login members using web services

I want a login system which authenticate user from web services.The steps should be as follows: we have few member web sites (Outside of wordpress server). Each member website have its corresponding ...
0
votes
1answer
223 views

Authentication over CURL

I am working on an API for a WordPress site. Basically, an external application (not made using WP) is able to send JSON to a file I made (api.php) and inside that file I load WP (using wp-load.php), ...
0
votes
3answers
3k views

Facebook Registration Tool: how to use in Wordpress? [closed]

Facebook provides a Tool to let Facebook users register to third party websites: https://developers.facebook.com/docs/plugins/registration/ How to integrate this tool into Wordpress? I would like ...
0
votes
1answer
89 views

How to set a cookie for logged in users to md5($user->ID . “my_secret”)?

For all logged in visitors of my WordPress website I would like to set 2 cookies based on their user ID - so that I can use their user IDs in WordPress-unrelated PHP scripts at the same domain. In ...
0
votes
0answers
76 views

Server-side processing of AJAX login

I'm using AJAX to login users on my website to avoid the need for a page refresh when they get their username or password wrong. Everything is done over SSL. My server-side processing: function ...
1
vote
0answers
48 views

Logging into multiple Non-Wordpress sites through one Wordpress login [closed]

I'm trying to connect my partner sites with my main site. Is it possible for me to be able to log into my partner sites (they aren't running on WordPress) AND my WordPress site simultaneously with one ...
0
votes
0answers
110 views

Custom login errors and redirect

I am working on a custom login page in Wordpress and found these 2 functions for a redirect back to the custom login pages to show errors there and nog on the Wordpress default login page. The first ...
0
votes
1answer
24 views

Adding a “Sign In/My Account” link to an external app

I'm using (or I'm going to use) WordPress for my product's marketing site. I use Rails for the product's application. Right now on my marketing site, which is currently in Rails, I have a link that ...
0
votes
0answers
23 views

Appengine - Wordpress authentication through google ID?

I am planning to migrate my website to Google appengine. I wanted to know that if I do migrate then will my users necessarily need to login using the googleID/openID or can I maintain the default ...
0
votes
0answers
260 views

Use WordPress as authentication for custom app

I am in the process of developing a custom web application which will require users to login. We have developed a WordPress website to manage the signup and payment/subscriptions for the application. ...
5
votes
3answers
660 views

why does WordPress need two cookies for auth/login

I can see two cookies: auth and login cookies in wordpress. Why do we need two? I think one is enough.
1
vote
1answer
375 views

How Authentication in wordpress works? wp_authenticate_username_password()

function wp_authenticate_username_password($user, $username, $password) { if ( is_a($user, 'WP_User') ) { return $user; } if ( empty($username) || empty($password) ) { $error = new WP_Error(); ...
2
votes
1answer
3k views

What exactly is ReAuth?

Searching for "WordPress Reauth" and the like all result in folks who are having problems with ReAuth=1. What exactly is ReAuth?
1
vote
0answers
330 views

Easiest Way to Authenticate WP Users Using an External DB?

I have been looking for the best/easiest way to share users on a WP blog (in a subfolder) with the MAIN site's user database so that people do not have to register/log in on the WP blog when already ...
0
votes
0answers
33 views

How do I authenticate/turn off a plugin remotely for plugin SaaS like functionality?

I have a client whom we created a custom plugin for. We are charging monthly for access to this plugin but the only way we have to disable it is manually in the Wordpress admin. How would I go about ...