Questions tagged [encryption]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
39 views

How to store API authentication password?

I am connecting a WP site to a service through the service API. The API authentication of this service is done using the service account username and password, not API keys: You send a request to the ...
user avatar
  • 356
0 votes
0 answers
29 views

Decode and Decrypt Azure B2C OpenID Authorization Token, Use Response in API Call (Example Token Within)

I have been provided with a working Azure AD B2C application, and my goal is to use it to facilitate a means of access control to particular content. Using that application URL, a successful login/...
user avatar
0 votes
0 answers
83 views

how to handle premium features in a wordpress plugin?

I am developing a plugin in wordpress. I have a question regarding the premium features. How we can manage premium features between free and paid membership? Are those features already part of ...
user avatar
1 vote
0 answers
298 views

wp_hash_password create a different hash everytime

I've already seen this topic: wp_hash_password unexpected behaviour And the problem is similar. I'm creating an API system where api_key and api_secret are the same as username and user_pwd. The ...
user avatar
  • 51
-1 votes
1 answer
1k views

I want to encrypt my WordPress plugin

We have developed a custom WordPress plugin. We want to encrypt the plugin code to protect the data. The plugin file contains 2 main files - The main plugin core file and a .php file. Both the ...
user avatar
1 vote
0 answers
27 views

Display encrypted content on my website

Good day I am new here and to wordpress as well, please can someone tell me how i can automatically hide email addresses displayed on the front page(dynamic Content), see example https://quickleads....
user avatar
2 votes
1 answer
545 views

Can I edit the wp_post > post_content right before its inserted/updated?

I would need to apply some sort of encryption on whatever gets inserted in the wp_post > post_content, so I was wondering if there is a way, either modifying the core (rather not), or using some ...
user avatar
  • 23
1 vote
1 answer
286 views

Parse form values before sending to options.php

I'm developing a custom plugin, which requires input of authentication data for a remote API, and this data needs to be saved. I want to encrypt it before saving to db. I've added a settings page, ...
user avatar
  • 975
0 votes
1 answer
896 views

Detect change in site_url and home_url

Is there an easy way to check if the site url or the home url has been updated ? Im looking for a hook that I can preferably plug into. I have a cryptographic function that needs to run only once ...
user avatar
2 votes
1 answer
2k views

Store and Encrypt Contact Form 7 Submissions in Database? [closed]

I have an additional security requirement (in addition to SSL) and I'm looking for a method (either a plugin or custom solution) of how to encrypt and store submissions from Contact Form 7 in the ...
user avatar
  • 157
1 vote
0 answers
1k views

Auto login subdomain from main domain on single sites with different DB

I would like to auto login to subdomain from main domain as well as from subdomain to main domain (if possible). I was already able to do this by sending url with encoded params to own php login ...
user avatar
-3 votes
2 answers
1k views

How to get real password (before encrypt) when register a user?

I just need to get real password (before encrypt) when user is registering. I need to save that password in another table. How I access the real password before encrypt? The reason for it is, I am ...
user avatar
0 votes
1 answer
36 views

Not able to log for the first time on a salted WordPress by creating pwd on BD

I've inherited a WordPress project and first thing I tried to do was create a superadmin user by inserting a new user into wp_users and the appropriate permissions into wp_usermeta. I've done that a ...
user avatar
0 votes
1 answer
615 views

Encrypt API key [duplicate]

One of my plugins is using an API key to communicate with an off-page service. However, this API is not encrypted and is therefore visible to everyone with an admin login. Can I encrypt the API key ...
user avatar
0 votes
1 answer
77 views

Retrieve $_POST data to send to javascript without using localize script

I have a situation here where I need to access the $_POST data to send a sensitive string to a javascript without using localize script and also not letting the sensitive string be available in the ...
user avatar
1 vote
3 answers
447 views

Sniffing wordpress user's credentials

Coming to WordPress development from more "hardcore" (slow) development, I find it extremely odd that the WordPress login process provides absolutely no defense from sniffing credentials data. It all ...
user avatar
0 votes
1 answer
159 views

Protect Post Permalink From Copy

It is possible to protect my post permalinks to get copy from other users or bots ? Let's say the post permalinks that tagged with tag "A" to get encrypted and all post to show in browser with: Post ...
user avatar
1 vote
2 answers
907 views

Using an Encryption class in a WordPress Plugin

I'm making a WordPress plugin that works with sensitive data. So I need to store/retrieve date with a trusty encryption method. I did some searches among many php encryption wrapper classes, and ...
user avatar
  • 111
1 vote
1 answer
440 views

Pass MD5 value to prepopulate field

this is my scenario: I have a gravity form A where i collect user data and users are automatically registered to my site (via gravity forms user registration plugin). Users then automatically login ...
user avatar
7 votes
3 answers
2k views

Are the default salts secure?

When installing a fresh wordpress, one of the things one should do is, updating the salts in wp-config.php. The section looks like this define('AUTH_KEY', 'put your unique phrase here'); ...
user avatar
4 votes
1 answer
836 views

Security in WordPress plugin development

My plugin is Mailer.app for WordPress, I'm 85% completed and I'm focusing on security before release. Before the questions, I should outline the plugins architecture: The plugin is able to take in ...
user avatar
  • 143
0 votes
1 answer
1k views

Is the login encrypted before it is sent? If so how to do I encrypt it the same way?

I've moved my WordPress site onto a https server, but now I'm wondering if I still need to manually encrypt the login credentials for my remote login. Is the default login encrypted before it is ...
user avatar
-3 votes
1 answer
252 views

Why can't I save encrypted data in a transient?

I'm trying to save encrypted data (using AES-256-CBC in PHP) in a transient but for some reason it keeps failing. The transient key is under the required length of 45 characters and the data is not a ...
user avatar
-1 votes
1 answer
3k views

How Wordpress hashes passwords

I found a nice article which explains at a high level how Wordpress hashes it's passwords, but is there a way to know exactly what encryption method from Portable PHP is used? I am building a ...
user avatar
  • 396
1 vote
2 answers
1k views

CNAME site attempts to load files over HTTP instead of HTTPS

The main site https://www.ptacunits.com loads fine. We have a CNAME pointing from the above domain to the following domain, https://www.ptacfactoryparts.com however, the page source shows HTTP ...
user avatar
1 vote
1 answer
659 views

Moving away from MD5: Where to declare the custom global $wp_hasher?

I want to move away from using MD5 for hashing passwords in the database. The plan is to declare a custom global $wp_hasher as hinted at in the docs for wp hash password(): Unless the global $...
user avatar
  • 111
0 votes
2 answers
465 views

Apply function to update_option Variable

I found some instructions on encrypting an options field for a plugin here, using: encrypt($input_string, $key){ $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB); $iv = ...
user avatar
  • 497
2 votes
1 answer
112 views

PGP-Encrypt system-generated notifications

I was wondering if there is a way to get Wordpress to encrypt notification mails ("Please moderate ..." and so on) using PGP. I have found a bunch of plugins providing PGP-encrypted eMail forms, but ...
user avatar
  • 123
3 votes
1 answer
3k views

Encrypt emails?

We need to maintain HIPPA compliance for forms on our website that are currently mailed to an internal email address. While the user/customers provides the info over HTTPS, we still want to make sure ...
user avatar
  • 131
4 votes
4 answers
17k views

How to validate WordPress generated password in DB using PHP?

I am working with site that is done with WordPress, and I need to add some parts that are outside WP, and to check user login, Logging users outside WP. I tried with md5 of password but it's not... ...
user avatar
7 votes
3 answers
43k views

How WordPress encrypt password? [duplicate]

Possible Duplicate: How to validate WordPress generated password in DB using PHP? I am working with site that is done with WordPress, and I need to add some parts that are outside WP, and to ...
user avatar
21 votes
3 answers
10k views

How to store username and password to API in wordpress option DB?

I'm currently developing a plugin and the chances are that I will more than likely release it on the public plugin repository so others can use it. The plugin will be using an API and to use this API ...
user avatar
  • 11.8k