The tag has no usage guidance.

learn more… | top users | synonyms

10
votes
4answers
15k views

Can I programmatically login a user without a password?

I'm manually creating users programmatically, and I want to sign in the newly created user. WP makes it easy to access the hashed password, but not the plaintext version. Is there a way to use ...
8
votes
1answer
9k views

Create API for single sign-on with 3rd party site

My site needs to integrate with a 3rd party software, which will live on its own sub-domain, hosted by the software company. I need to provide the 3rd party developers with an endpoint that they can ...
7
votes
5answers
9k views

How to validate a user from ouside wordpress/php?

I'm working on an ajax application that will be embedded in a wordpress page. The ajax app exchanges data with servlets running on tomcat. Now the servlets need a way to determine if a request comes ...
6
votes
2answers
2k views

What is $interim_login?

I found an $interim_login variable within the wp-login.php file, and I'm not sure what it does or what it is. The documentation around the interwebs is pretty sparse. What is $interim_login?
6
votes
2answers
556 views

How to pass users back and forth using session data?

I have applications that I wrote that use SAML and then a user database to define permissions for them all. And basically once a user signs on via our SSO they can use the applications with their ...
5
votes
2answers
1k views

why does WordPress need two cookies for auth/login

I can see two cookies: auth and login cookies in wordpress. Why do we need two? I think one is enough.
5
votes
1answer
2k views

Disable WordPress 3.6 idle logout / login modal window / session expiration

I manage a WordPress site hosted at WPEngine that was recently force-upgraded to version 3.6. The upgrade introduced "In-line login following expired sessions", and therein lies the problem. The ...
5
votes
2answers
2k views

custom XMLRPC method plus authentication of user & WooCommerce order

I'm working with a custom XML-RPC method to capture some information for a plugin I am building. When activated the user has to authenticate themselves by entering there user/password given to them ...
4
votes
3answers
5k views

Adding extra authentication field in login page

I am going to enhance my WordPress authentication page. My idea is that simply adding an extra field into the login page. The extra field will require user to enter personal identification code (4 to ...
4
votes
2answers
1k views

How can I log a user out of Wordpress before the page loads?

I would am using the code below so that on my wordpress site if ?logout is appended to the end of the URL the user will be logged out. This works well - if the user visits a page such as ...
4
votes
1answer
211 views

how to authenticate for the REST API from a plugin and from command line

I want to try the new REST API but I'm not used to this kind of things. Basically, I want to use it to GET custom posts via ajax and show on the website frontend (I'm building an ajax product ...
4
votes
1answer
324 views

Extend Wordpress (4.x) session and nonce

We've got a small web application that allows users to log in (via WordPress) and remain logged in for a max 15 min session for security purposes. Because most sessions will last longer, I have a ...
4
votes
1answer
4k views

How to change the default home page for the WordPress Dashboard?

Is it possible to change the Default "Home" admin page when logging into the WordPress Dashboard? I thought about a couple of possibilities... Substitute the content on the Dashboard home page ...
4
votes
2answers
547 views

Storing Dropbox Authentication?

I am trying to create a Wordpress plugin that exports each blog post to my dropbox folder. The code is below but I have a problem. If I run this code outside Wordpress, it works perfectly. The table ...
3
votes
2answers
1k views

Facebook OAuth, WP_Http::request() vs wp_remote_request()

Running WordPress 3.3.2 and PHP Version 5.2.17 I'm trying to get the access_token from Facebook using wp_remote_request() and Facebook OAuth API (btw, working example at the end of this entry). Is ...
3
votes
1answer
5k views

How to use WordPress authentication on non-WordPress page?

I have a site based on WordPress. This site has some functions for member only. One of the functions is a external script and I believe anyone can access this without authentication. I can add ...
3
votes
4answers
10k views

How to check username/password without signing in the user

I'm writing a plugin that creates an API endpoint that validates username/password pairs. I'm currently using wp_signon() to check whether the username/password combo works. This works fine when the ...
3
votes
1answer
244 views

Authentication / login mechanism (non wp-admin)

I am developing a theme. I need to have a user login system, that allows users to see all contents of the application and interact with it only after they login (not admin panel login). I need to ...
3
votes
1answer
32 views

Keep Users Logged In As Long As I Like

I'm implementing a Kiosk webapp based off WordPress and I have some conditionals which are key, they work based on whether user is logged in or not. I'm aware that after user clicks "remember me" it ...
3
votes
1answer
84 views

How do you import members from another system to Wordpress and update passwords so they'll work?

Our current system ( not using Wordpress ) has 1000s of users that we need to port over to Wordpress. The problem we're running into is that the passwords can't stay the same. In our current system ...
3
votes
3answers
2k views

Using `auth_redirect` : keeps asking me to login even when I'm logged in

I am trying to use auth_redirect to automatically redirected not logged-in visitors when then visit a specific page. Here is the code I use: ...
3
votes
1answer
458 views

Authentication/API Questions

We are trying to use S2Member to manage our WP site and memberships for a Flash program that we are launching. We'd like to use S2Member to authenticate the user when they login and remain logged in. ...
3
votes
1answer
2k views

How to transition cookies from .subdomain.domain.com to .domain.com with minimal impact on users?

I need to extend the cookies of a subdomain.domain.com to all of the domain.com's subdomains (.domain.com in cookie terms). I am trying to minimize the impact of this transition. It seems that ...
3
votes
1answer
94 views

How does ifttt.com authenticate a supplied WordPress account

I'm curious to know how ifttt.com authenticate a supplied WordPress admin login credentials. And after authorization is granted, how does it publish post on our behalf? am curious to know what ...
3
votes
1answer
353 views

Security error WP 4.0 + WP phpBB Bridge [closed]

so today I updated to 4.0 (glad I had backup). Everything was working fine until I tried to publish a post. There I got Are you sure you want to do this. Also had Cheatin' Uh under ...
3
votes
1answer
246 views

Friendica integration using wordpress authentication

I currently have a BuddyPress community with bbPress forums and a MediaWiki based collaborative area. I'll soon be adding Friendica support for good integration with other friends Diaspora websites ...
3
votes
4answers
2k views

Wordpress auto login after registration not working

So I looked up a bunch of threads trying to figure out how to automatically log a user in after registration, and came up with this. function log_me_the_f_in( $user_id ) { $user = ...
3
votes
2answers
525 views

Override user authentication with external credentials

I'm working on a site running WordPress along with a vBulletin forum. The user base is registered on vBulletin. I need to allow users to appear logged in on WordPress as well for the sole purpose of ...
2
votes
2answers
114 views

Best Way to Enable Two Step Authentication

I'm looking for a bit of guidance on setting up a two step authentication system in WordPress. I've looked at a few of the main plugins and they seem to fall in to two camps: Add an extra field to ...
2
votes
1answer
6k views

What exactly is ReAuth?

Searching for "WordPress Reauth" and the like all result in folks who are having problems with ReAuth=1. What exactly is ReAuth?
2
votes
1answer
461 views

Plugin to require Twitter or Facebook login before posting a comment [closed]

There are similar questions to this one (e.g. A plugin where users can comment with Facebook or Twitter or OpenID or Twitter/Facebook login for comments) but none of it fully addresses my scenario so ...
2
votes
1answer
281 views

How can I use CURLOPT_USERPWD in wp_remote_post?

I'm trying to setup a proper cURL call in WordPress so am using wp_remote_post(). However, I'm having trouble authenticating the user via wp_remote_post(). Any idea how to convert the following to be ...
2
votes
1answer
2k views

WordPress as a OAuth Provider

I have just started to read on OAuth as I need to integrate it within a WordPress web app. As per my understanding of OAuth, signed requests are sent between the client and the server. These signed ...
2
votes
1answer
2k views

Is it possible a one click user registration with Facebook or Twitter (or other Social Networks)?

Would it be possible to create a wp user by signin up with Facebook connect? (And through Twitter app, and eventually other major social networks? Facebook is most important, then Twitter, the rest ...
2
votes
1answer
145 views

Restricting access to content

I'm developing a functionality to let only customers and doctors have access to exam results. But i'm not so sure about the strenght of my code in securing view only to those authorised. I've gotten ...
2
votes
0answers
253 views

Authenticated request to WP REST API V2 returning 403 error on /users/me [closed]

I am using WP REST API Version 2.0-beta7 together with WP OAuth Server version 3.1.91 After authenticating with the User Credentials grant type, a request to ...
2
votes
1answer
253 views

How do I use the WP REST API plugin and the OAuth Server plugin to allow for registration and login?

Are there any example projects that do the same? I want to be able to login and register for accounts on my site via the API.
2
votes
0answers
883 views

Login members using web services

I want a login system which authenticate user from web services.The steps should be as follows: we have few member web sites (Outside of wordpress server). Each member website have its corresponding ...
1
vote
4answers
805 views

current_user_can not always working properly

I have a custom Wordpress theme that includes a members only section. In order to implement this, I have the following code at the top of my restricted pages. <?php if ( ! current_user_can ...
1
vote
2answers
170 views

How to get the ID of the currently logged in user?

I want to get the ID of the currently logged in user. I've found the function: get_current_user_id which seems to be working, however I'm not sure what 'current' means in this context. Meaning if the ...
1
vote
5answers
6k views

How do I require authorization / login to view a specific set of posts / pages?

I am working on a wordpress site for a client who wants an internal 'intranet' for his employees. The basic needs are: Communicate things in-house House important company documents Provide quick ...
1
vote
2answers
2k views

Are there ways of logging in that bypass wp-login.php altogether?

I have a WP install that's been getting hammered the last couple days by brute force login attempts. The site has the Limit Login Attempts plug-in installed. And when I started getting frequent ...
1
vote
2answers
482 views

add action which returns modified value

I want to modify submited password in wp_logon wp_authenticate action. When authenticating, I want to grab submited password, modify it, and pass back to wp_logon So here is an action ...
1
vote
1answer
55 views

How to display username and password after registration

When a new user registers for a new account, WordPress sends an email with the login information as usual. The password is auto-generated and stored securely in the WP database and the registration is ...
1
vote
1answer
29 views

What's hook to use immediately after a user is authentcated [duplicate]

Does anyone know the add_action() hook to use immediately after a user is successfully authenticated. Hook Test based on @mmm's answer I ran this test from my mu-plugins.php file: function ...
1
vote
2answers
235 views

Wordpress asking for FTP details when installing plugins

I'm renting a server from DigitalOcean on which I'm running Wordpress inside apache on port 8079. DigitalOcean also only allows one to connect via SFTP. Currently the client I use to do that is ...
1
vote
1answer
887 views

How Authentication in wordpress works? wp_authenticate_username_password()

function wp_authenticate_username_password($user, $username, $password) { if ( is_a($user, 'WP_User') ) { return $user; } if ( empty($username) || empty($password) ) { $error = new WP_Error(); ...
1
vote
1answer
1k views

Set authentication cookies to be shorter but then extend with every page load

I'm trying to get around the otherwise very insecure way of Wordpress handling authentication cookies. I mean, having the cookie expire in 2 weeks only if I build a membership site is obviously not ...
1
vote
1answer
1k views

Error when requesting password reset email - wp authentication

I get the following error whenever a user tries to request a password reset email: The e-mail could not be sent. Possible reason: your host may have disabled the mail() function. As per ...
1
vote
2answers
133 views

Registered but Anonymous comments

Is there a way / set of plugins that could enable discussion where each commenter is 'authenticated' with the site (via openid/fb/twitter/etc) but the commenter can still use a anonymous/fake name? ...