I have a site based on WordPress. This site has some functions for member only. One of the functions is a external script and I believe anyone can access this without authentication.

I can add .htaccess to this script to prevent unauthorized access. But then my users have to login again and it's kind of inconvenient.

Is there any solution to add some check to my script that use the same WordPress authentication mechanism, that is, if user already login, he have full access to the script. If not, he will be redirected to WordPress login page.

EDIT: My script is written in PHP

  • When you say script, do you mean PHP code or javascript?
    – Steven
    Aug 21, 2011 at 10:32
  • Yes, it's PHP code Aug 21, 2011 at 10:46

1 Answer 1


Just add this at the top of your file:


// If you run multisite, you might nees this to prevent 404 error
header('HTTP/1.1 200 OK');

Note that the file must be in the same folder as your theme.

Then you can use is_user_logged_in before executing the rest of the script. If use is not logged in, then just trigger the login form or a login plugin.

  • Although this should work, it'll take huge amount of resources to load WordPress in any page (as wordpress normally does). Nov 4, 2020 at 13:57

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.