The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
2answers
31 views

Using an Encryption class in a WordPress Plugin

I'm making a WordPress plugin that works with sensitive data. So I need to store/retrieve date with a trusty encryption method. I did some searches among many php encryption wrapper classes, and ...
1
vote
1answer
18 views

Pass MD5 value to prepopulate field

this is my scenario: I have a gravity form A where i collect user data and users are automatically registered to my site (via gravity forms user registration plugin). Users then automatically login ...
5
votes
3answers
144 views

Are the default salts secure?

When installing a fresh wordpress, one of the things one should do is, updating the salts in wp-config.php. The section looks like this define('AUTH_KEY', 'put your unique phrase here'); ...
0
votes
0answers
22 views

Where i need to hook in order to catch view,edit,create user actions and encrypt / decrypt accordingly?

I need to be able to encrypt / decrypt CPT fields automatically. This means that i need to decrypt the content automatically when i user views or tries to edit a CPT and also i need to encrypt when ...
5
votes
1answer
208 views

Security in WordPress plugin development

My plugin is Mailer.app for WordPress, I'm 85% completed and I'm focusing on security before release. Before the questions, I should outline the plugins architecture: The plugin is able to take in ...
0
votes
1answer
38 views

Is the login encrypted before it is sent? If so how to do I encrypt it the same way?

I've moved my WordPress site onto a https server, but now I'm wondering if I still need to manually encrypt the login credentials for my remote login. Is the default login encrypted before it is ...
-3
votes
1answer
48 views

Why can't I save encrypted data in a transient?

I'm trying to save encrypted data (using AES-256-CBC in PHP) in a transient but for some reason it keeps failing. The transient key is under the required length of 45 characters and the data is not a ...
0
votes
0answers
17 views

migrating user and passwords from jshop to wordpress

Hi i am migrating from jshop to wordpress so i also want to migrate old website users but there passwords a encryted using md5($string.$salt) method but then if i add user to wordpress database then ...
0
votes
0answers
19 views

Redirect login without encryption [ private.me ]

Im trying to build a plugin to redirect a new user when they login to WP before any WP encryption takes place. I want to send them to private.me for their proprietary encryption (tokenizing, slicing), ...
0
votes
0answers
19 views

How Wordpress hashes passwords

I found a nice article which explains at a high level how Wordpress hashes it's passwords, but is there a way to know exactly what encryption method from Portable PHP is used? I am building a ...
1
vote
2answers
157 views

CNAME site attempts to load files over HTTP instead of HTTPS

The main site https://www.ptacunits.com loads fine. We have a CNAME pointing from the above domain to the following domain, https://www.ptacfactoryparts.com however, the page source shows HTTP ...
1
vote
1answer
219 views

Moving away from MD5: Where to declare the custom global $wp_hasher?

I want to move away from using MD5 for hashing passwords in the database. The plan is to declare a custom global $wp_hasher as hinted at in the docs for wp hash password(): Unless the global ...
0
votes
1answer
126 views

Apply function to update_option Variable

I found some instructions on encrypting an options field for a plugin here, using: encrypt($input_string, $key){ $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB); $iv = ...
2
votes
1answer
52 views

PGP-Encrypt system-generated notifications

I was wondering if there is a way to get Wordpress to encrypt notification mails ("Please moderate ..." and so on) using PGP. I have found a bunch of plugins providing PGP-encrypted eMail forms, but ...
3
votes
1answer
1k views

Encrypt emails?

We need to maintain HIPPA compliance for forms on our website that are currently mailed to an internal email address. While the user/customers provides the info over HTTPS, we still want to make sure ...
3
votes
3answers
8k views

How to validate WordPress generated password in DB using PHP?

I am working with site that is done with WordPress, and I need to add some parts that are outside WP, and to check user login, Logging users outside WP. I tried with md5 of password but it's not... ...
6
votes
3answers
24k views

How WordPress encrypt password? [duplicate]

Possible Duplicate: How to validate WordPress generated password in DB using PHP? I am working with site that is done with WordPress, and I need to add some parts that are outside WP, and ...
11
votes
2answers
3k views

How to store username and password to API in wordpress option DB?

I'm currently developing a plugin and the chances are that I will more than likely release it on the public plugin repository so others can use it. The plugin will be using an API and to use this API ...