Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [encryption]

The tag has no usage guidance.

2
votes
1answer
63 views

Can I edit the wp_post > post_content right before its inserted/updated?

I would need to apply some sort of encryption on whatever gets inserted in the wp_post > post_content, so I was wondering if there is a way, either modifying the core (rather not), or using some ...
0
votes
0answers
101 views

Wordpress-Plugin: How to store aes encrypted data in wp_options?

I want to encrypt a password with AES and save it in wp_options: $pw = "mypassword"; $encPasswd = $wpdb->get_var( "SELECT AES_ENCRYPT('$pw','12345')" ); Beacause values in wp_options are longtext,...
1
vote
1answer
33 views

Parse form values before sending to options.php

I'm developing a custom plugin, which requires input of authentication data for a remote API, and this data needs to be saved. I want to encrypt it before saving to db. I've added a settings page, ...
0
votes
1answer
195 views

Detect change in site_url and home_url

Is there an easy way to check if the site url or the home url has been updated ? Im looking for a hook that I can preferably plug into. I have a cryptographic function that needs to run only once ...
1
vote
1answer
1k views

Store and Encrypt Contact Form 7 Submissions in Database? [closed]

I have an additional security requirement (in addition to SSL) and I'm looking for a method (either a plugin or custom solution) of how to encrypt and store submissions from Contact Form 7 in the ...
1
vote
0answers
442 views

Auto login subdomain from main domain on single sites with different DB

I would like to auto login to subdomain from main domain as well as from subdomain to main domain (if possible). I was already able to do this by sending url with encoded params to own php login ...
-3
votes
2answers
230 views

How to get real password (before encrypt) when register a user?

I just need to get real password (before encrypt) when user is registering. I need to save that password in another table. How I access the real password before encrypt? The reason for it is, I am ...
0
votes
1answer
21 views

Not able to log for the first time on a salted WordPress by creating pwd on BD

I've inherited a WordPress project and first thing I tried to do was create a superadmin user by inserting a new user into wp_users and the appropriate permissions into wp_usermeta. I've done that a ...
0
votes
1answer
273 views

Encrypt API key [duplicate]

One of my plugins is using an API key to communicate with an off-page service. However, this API is not encrypted and is therefore visible to everyone with an admin login. Can I encrypt the API key ...
0
votes
1answer
53 views

Retrieve $_POST data to send to javascript without using localize script

I have a situation here where I need to access the $_POST data to send a sensitive string to a javascript without using localize script and also not letting the sensitive string be available in the ...
1
vote
3answers
232 views

Sniffing wordpress user's credentials

Coming to WordPress development from more "hardcore" (slow) development, I find it extremely odd that the WordPress login process provides absolutely no defense from sniffing credentials data. It all ...
0
votes
1answer
75 views

Protect Post Permalink From Copy

It is possible to protect my post permalinks to get copy from other users or bots ? Let's say the post permalinks that tagged with tag "A" to get encrypted and all post to show in browser with: Post ...
1
vote
2answers
455 views

Using an Encryption class in a WordPress Plugin

I'm making a WordPress plugin that works with sensitive data. So I need to store/retrieve date with a trusty encryption method. I did some searches among many php encryption wrapper classes, and ...
1
vote
1answer
271 views

Pass MD5 value to prepopulate field

this is my scenario: I have a gravity form A where i collect user data and users are automatically registered to my site (via gravity forms user registration plugin). Users then automatically login ...
7
votes
3answers
1k views

Are the default salts secure?

When installing a fresh wordpress, one of the things one should do is, updating the salts in wp-config.php. The section looks like this define('AUTH_KEY', 'put your unique phrase here'); ...
5
votes
1answer
323 views

Security in WordPress plugin development

My plugin is Mailer.app for WordPress, I'm 85% completed and I'm focusing on security before release. Before the questions, I should outline the plugins architecture: The plugin is able to take in ...
0
votes
1answer
646 views

Is the login encrypted before it is sent? If so how to do I encrypt it the same way?

I've moved my WordPress site onto a https server, but now I'm wondering if I still need to manually encrypt the login credentials for my remote login. Is the default login encrypted before it is ...
-3
votes
1answer
156 views

Why can't I save encrypted data in a transient?

I'm trying to save encrypted data (using AES-256-CBC in PHP) in a transient but for some reason it keeps failing. The transient key is under the required length of 45 characters and the data is not a ...
-1
votes
1answer
2k views

How Wordpress hashes passwords

I found a nice article which explains at a high level how Wordpress hashes it's passwords, but is there a way to know exactly what encryption method from Portable PHP is used? I am building a ...
1
vote
2answers
966 views

CNAME site attempts to load files over HTTP instead of HTTPS

The main site https://www.ptacunits.com loads fine. We have a CNAME pointing from the above domain to the following domain, https://www.ptacfactoryparts.com however, the page source shows HTTP ...
1
vote
1answer
412 views

Moving away from MD5: Where to declare the custom global $wp_hasher?

I want to move away from using MD5 for hashing passwords in the database. The plan is to declare a custom global $wp_hasher as hinted at in the docs for wp hash password(): Unless the global $...
0
votes
2answers
290 views

Apply function to update_option Variable

I found some instructions on encrypting an options field for a plugin here, using: encrypt($input_string, $key){ $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB); $iv = ...
2
votes
1answer
88 views

PGP-Encrypt system-generated notifications

I was wondering if there is a way to get Wordpress to encrypt notification mails ("Please moderate ..." and so on) using PGP. I have found a bunch of plugins providing PGP-encrypted eMail forms, but ...
3
votes
1answer
2k views

Encrypt emails?

We need to maintain HIPPA compliance for forms on our website that are currently mailed to an internal email address. While the user/customers provides the info over HTTPS, we still want to make sure ...
3
votes
4answers
13k views

How to validate WordPress generated password in DB using PHP?

I am working with site that is done with WordPress, and I need to add some parts that are outside WP, and to check user login, Logging users outside WP. I tried with md5 of password but it's not... ...
7
votes
3answers
37k views

How WordPress encrypt password? [duplicate]

Possible Duplicate: How to validate WordPress generated password in DB using PHP? I am working with site that is done with WordPress, and I need to add some parts that are outside WP, and to ...
19
votes
3answers
6k views

How to store username and password to API in wordpress option DB?

I'm currently developing a plugin and the chances are that I will more than likely release it on the public plugin repository so others can use it. The plugin will be using an API and to use this API ...