The tag has no usage guidance.

learn more… | top users | synonyms

18
votes
5answers
18k views

Sending the reset password link programatically

I have this manually created page: $user_login = sanitize_text_field( $_GET['user_login'] ); if ( username_exists( $user_login ) || email_exists($user_login) ) { ?> <!--Everything has been ...
8
votes
2answers
2k views

Why are passwords exportable as plain text in WordPress?

On my WordPress 3.9.2 installation can I extract the users plain text passwords by going to Users, select all users, and choosing Bulk Actions Export. When I look in the mySQL database with ...
8
votes
3answers
19k views

Check for correct username on custom login form

I have used Jeff Star's tutorial for creating my own custom login form http://digwp.com/2010/12/login-register-password-code/. It works great, but I have one problem. On the reset password form, if ...
7
votes
2answers
348 views

Where to securely store API keys and passwords in WordPress?

I'm looking to use a few APIs and many come with keys, secret keys and passwords required to work. Where in WordPress can you store that information? Assuming anyone can hack your DB is there anyway ...
7
votes
1answer
483 views

How to protect pages with double authentication: password + email (in custom field)

I would like to extend the WordPress password protection of posts by adding extra input field for user email. So in order to see the content user will have to know the password and previously given ...
7
votes
4answers
3k views

Disable user registration password email

So, WordPress 4.3 has a new password system as we all know. Unfortunately, this new system has done away with the ability to NOT send new users an email. My client was using a system where he sent a ...
6
votes
1answer
624 views

multi page password protection

Is it possible to have the "password protected page" feature of WordPress apply to more than one page? I have dozens of pages which I wish to protect with the same password, but I don't want people to ...
5
votes
4answers
7k views

wordpress redirect after password reset

I would like to able to redirect to get_bloginfo('url'); after reseting password. But I cannot for life of me find any simple answer or function to do this. Does anyone know if this is possible? ...
5
votes
4answers
2k views

Replacing the Wordpress password validation

I have a custom application with thousands of users who already have a password stored. I would like to set up a self hosted wordpress site to accompany that application and to use the usernames and ...
5
votes
2answers
6k views

How to let user set password on registration

I´m working on a front end registration form adn have gotten as far as getting the standard registration form to work, but... I´d like to add the oportunity to let the user choose his/her own password....
5
votes
1answer
2k views

Add error message on password protected page

I protected a page with password. I’d like to add a short error message when the inserted password is incorrect. How can I do this? I add this code to show and customize the form on my page. My ...
5
votes
1answer
281 views

How can I safely increase the character limit for post passwords?

When I want to protect a post on one of my blogs, I like to use a passphrase instead of a password (albeit purely for the sake of creativity, not security — they're stored plainly anyway). However, ...
4
votes
3answers
7k views

Password protecting a page

I'm trying to password protect a page but it doesn't seem to be working. I've set the password for the page but when you navigate to it it just loads up like normal and doesn't ask for any passwords. ...
4
votes
3answers
1k views

Password protected posts redirects

I have a page associated with a custom template that list all password protected posts. Let's name it MyPage. What I'm trying to achieve is when a user views MyPage to show only once the ...
4
votes
2answers
1k views

how to use joomla password format in wordpress?

I need to import more than 1000 users from joomla to wordpress. I can do that with csv. My main concern are passwords. I did some googling and found out that it is possible to change wordpress ...
4
votes
1answer
2k views

How to save Admin FTP password

Every time I attempt to upload a plugin or theme, I am asked for the FTP password. Is there a way to save this within Wordpress, or do I have to enter it every time? Thanks.
4
votes
1answer
530 views

Password protect page with multiple passwords

Hi my client need to add password protect page in wordpress. So i make the visibility of page as password protect and it is working correctly. But client is giving a series of password .He is given ...
4
votes
1answer
151 views

Why do generated passwords start/end with spaces?

When new passwords are generated for new users, some users are reporting that the passwords include spaces at the beginning and end of the passwords. Has anyone ran into this before or have any idea ...
4
votes
1answer
200 views

Hide password protected posts in admin

I'm building a site for a client and we're using WordPress' native password protect functionality. Is there a filter or some kind of action to filter posts retrieved in the administration panel? If I ...
4
votes
2answers
357 views

Make password invalid once logged out of password-protected page

In a WP-based site I have a custom form which I need to hide from the general public and give access to only a select few who would then get a password from me, enter it and access the form and submit ...
3
votes
3answers
4k views

Forcing all posts associated with a custom post type to be private

Does anyone know of a way to add code to the functions.php file which will automatically force all posts belonging to a custom post type to be "private" and/or "password protected" with a default ...
3
votes
2answers
400 views

Problems after wp_set_password() containing an apostrophe

So we are using a couple of custom things in our WP and one of them is a PW-Recovery form. Using this internally we're setting the password with wp_set_password($password, $userId) Lately we ...
3
votes
5answers
795 views

Is it possible to direct users to a certain post based on a password entered on the home page?

I'd like to be able to have a workflow that works like so: Create a post and assign it a password Have a single-field form on the home page User enters password on home page, and is sent to the ...
3
votes
1answer
2k views

Is it possible to use a forgot password url filter?

i recently found that a login url filter is available but i can't find a solution for the forgot password as well, for the login url i use this: function custom_login_url($login_url) { return ''....
3
votes
2answers
2k views

Hide password protected posts

If I create a post and set the visibility to "password protected", it still shows up on the front page and in the feeds. Is it possible to hide posts from general view altogether, but still allow ...
3
votes
1answer
2k views

How can I detect if a user changes their password?

I would like to track when a user changes their password. Is there a way to detect when a password has been changed?
3
votes
1answer
2k views

Network Admin “You do not have sufficient permissions to access this page.”

I have had trouble logging into WP-Admin with my admin account. I have reset my password, and I can now log-in to WP-Admin, but cannot reach Network Admin (/wp-admin/network), instead receiving "You ...
3
votes
2answers
656 views

Setting WP Admin passwords to expire

I'm aware it's not a feature of Wordpress, but I was wondering if there was a way or a plug-in (haven't found one from searching) that allows me to force a user to change their password after a ...
3
votes
1answer
112 views

Bypass password protected posts via GET variable

I like to bypass the password form of protected posts with a GET variable with following requirements: No changes to the core No clear exposure of the password (hashing) No security leaks No ...
3
votes
2answers
11k views

Custom reset password template after forgot password request

I've made a custom login template where you can login or request a link that sends you to the reset password form. What I need to do is make that unique link redirect to a custom reset password ...
3
votes
1answer
693 views

Force all users in MU to change their passwords

I'm looking for a solution to notify/force all users in an MU network to change their passwords. Any ideas of a solution out there as a plug-in?
3
votes
1answer
28 views

Problem with logging in WP users automatically

As an interim measure while migrating users to a new system I have devised a solution where when a user logs in the old system, they are forwarded to the new system and automatically logged in to ...
3
votes
1answer
159 views

Comments number message in password protected post

I've got a password protected post and comments_popup_link('No Comments', '1 Comment', '% Comments'); function displays "ENTER YOUR PASSWORD TO VIEW COMMENTS." message. The question is, is it possible ...
3
votes
1answer
65 views

User password field is empty

Note: actually, the described situation is on a local environment. I'd like to know what happens if it goes live with this setting. I've installed a plugin and it has reset all the password in the WP ...
3
votes
1answer
56 views

Migrating users from .com to .org?

I am in the process of migrating my blog from my wordpress.com address to a self-hosting (wordpress v3.1.2) address. Blog has migrated across nicely. Appears my users have also migrated across, but ...
2
votes
3answers
340 views

Is it possible to get a user with just the password field?

I tried doing something like this: $user = $wpdb->get_row(' SELECT * FROM ' . $wpdb->users . ' WHERE user_pass = "' . wp_hash_password('password') . '"' ); But the ...
2
votes
1answer
2k views

Can't login to wordpress despite changing password to something known directly in MySQL or using “Password Reset by Email” feature

I'm unable to login to my wordpress site v3.1.3 even though I know the password. To be extra sure, I directly changed the password for the user account (ID=1) with UPDATE wp_users SET user_pass="(...
2
votes
1answer
173 views

How is password strength calculated?

A password, that contains: at least one capital letter, at least one small letter, at least one number and at least one non-alphanumeric character, is considered moderate to strong (sometimes even ...
2
votes
1answer
1k views

Access code/password only restricts page access, no user registration..?

Does anyone know of a plugin that will allow for a simple access/invite code to be given out, and when entered, will allow access to a certain page? I'm looking to only have one input field and no ...
2
votes
2answers
141 views

How to create a word press user with hashedpassword

I have set of user data from another wordpress site and i want o create users for each of them in a another wordpress web site..,it is works fine with wp_insert_user($user) but problem is the ...
2
votes
2answers
2k views

Password change when the user login first time

I have a "change password" page. Is there a way to redirect that page when the user login first time using wordpress generated password? Thanks
2
votes
1answer
2k views

login to wordpress with Get variables instead of Post

Im using swish-e to index my corporate site and documents. Problem is that i need to login to wordpress via get variables. Wordpress login uses post variable but i need to login with GET variables ...
2
votes
1answer
827 views

Where is the reset password key stored/generated?

Where is the reset password key stored in the wordpress DB? Is this the same as the user_activation_key? WP version 3.2.1
2
votes
2answers
2k views

Get password when user registers and save it sha1 into database

im working on a website where the users can connect with iphone to some functions of it by using a sha1 encrypted password. In other words the plain password of wordpress encrypted in sha1. In the ...
2
votes
1answer
4k views

password protect individual pages

Is it possible to password protect individual pages with Wordpress? What I'm trying to do is have special pages suche as somesite.com/project1 which has a username and password that I can set, but ...
2
votes
1answer
95 views

How to customise wp-login.php only for users who are setting a password for the first time?

As administrator, if I make a new user, I can choose to email my new users a link which they click to go to wp-login.php where they are invited to set their password for the first time. (Wordpress ...
2
votes
2answers
3k views

How to apply the “retrieve_password_message” filter?

I would like to change the body of the password reset email that WP sends out with something more friendly. I am trying to use the "retrieve_password_message" filter but I am messing it up. Can ...
2
votes
2answers
2k views

Set Session Time Limit for Password Protected Posts

I have made a series of posts and pages password protected on my website using the built-in Visibility setting. They all use the same password, so the user can view all of them after entering the ...
2
votes
1answer
173 views

How validate usernames/passwords against WP's database?

In wordpress password is encrypted in one format (which i don't know exactly) then saved in database, when i see in db it look in coded form. I want code in dot net which validated or checked ...
2
votes
2answers
595 views

wp_hash_password unexpected behaviour

When I run wp_hash_password("password") twice the outputs are different. I was under the impression that this is not how hashes are supposed to work. So how should I use wp_hash_password to compare ...