1

people need a user account on my site to be able to download a plugin. I want to add an activation function in the plugin so a user must supply their username and password the first time they use the plugin to make sure that they have a valid user account on my site before they can use it

what is the simplest way to remotely check a username and password to see if it valid or not from within a php file?

I don't want to enable xml rpc on the site.

Improve this question
1

Its nonsensical to lock activation, unless the functional part of your code remains on your site. You essentially can make a service that you hide behind a login or apikey (like akismet) which may or may not make sense for your plugin.

Calling home for permission to activate is a terrible idea, because idealistically, it's a violation of the GPL (won't earn you any fans or loyalty), and pragmatically, the client can easily change the code to not require the permission (won't earn you any money either).

You could deny auto-updates and support behind a support contract, but that's different isn't it? In that case you cache the login info into an option and transmit that back you your server each time it requests the update zip. Your server checks the validity of the info before sending the update archive.

Improve this answer
1
  • This (API key for updates) is what Relevanssi Premium does, and it works very well. It's not difficult to implement, either - there's a great example in Professional Wordpress Plugin Development (which every plugin dev should read). ACF takes the first approach, and anyone can unlock the paid features by changing a couple lines of code - without violating the license agreement. It works for him because his primary audience isn't likely to know how to do so. – SickHippie Mar 30 '12 at 20:27

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.