Questions tagged [encryption]
The encryption tag has no usage guidance.
34
questions
0
votes
0
answers
19
views
Ask: Anonymization Data of live Wordpress site
sorry, wondering for this scenario below there is a website which contains data about subscribers (email, name, etc) are there any way to encrypt or anonymize those data ?
I'm currently looking more ...
2
votes
1
answer
52
views
How to Deobfuscate a sourcecop protected WordPress plugin?
I have a plugin, which was obfuscated by plugin developer with sourcecop. At some point it began sending out lots of php warnings to debug.log. I couldn't debug it myself since it was obfuscated, but ...
- 141
0
votes
0
answers
180
views
How to store API authentication password?
I am connecting a WP site to a service through the service API.
The API authentication of this service is done using the service account username and password, not API keys:
You send a request to the ...
- 366
0
votes
0
answers
94
views
Decode and Decrypt Azure B2C OpenID Authorization Token, Use Response in API Call (Example Token Within)
I have been provided with a working Azure AD B2C application, and my goal is to use it to facilitate a means of access control to particular content.
Using that application URL, a successful login/...
0
votes
0
answers
128
views
how to handle premium features in a wordpress plugin?
I am developing a plugin in wordpress. I have a question regarding the premium features. How we can manage premium features between free and paid membership?
Are those features already part of ...
1
vote
0
answers
563
views
wp_hash_password create a different hash everytime
I've already seen this topic: wp_hash_password unexpected behaviour
And the problem is similar.
I'm creating an API system where api_key and api_secret are the same as username and user_pwd. The ...
- 51
-1
votes
1
answer
1k
views
I want to encrypt my WordPress plugin
We have developed a custom WordPress plugin.
We want to encrypt the plugin code to protect the data.
The plugin file contains 2 main files - The main plugin core file and a .php file.
Both the ...
1
vote
0
answers
28
views
Display encrypted content on my website
Good day
I am new here and to wordpress as well, please can someone tell me how i can automatically hide email addresses displayed on the front page(dynamic Content), see example https://quickleads....
2
votes
1
answer
636
views
Can I edit the wp_post > post_content right before its inserted/updated?
I would need to apply some sort of encryption on whatever gets inserted in the wp_post > post_content, so I was wondering if there is a way, either modifying the core (rather not), or using some ...
- 23
1
vote
1
answer
347
views
Parse form values before sending to options.php
I'm developing a custom plugin, which requires input of authentication data for a remote API, and this data needs to be saved. I want to encrypt it before saving to db.
I've added a settings page, ...
- 975
0
votes
1
answer
984
views
Detect change in site_url and home_url
Is there an easy way to check if the site url or the home url has been updated ? Im looking for a hook that I can preferably plug into.
I have a cryptographic function that needs to run only once ...
- 105
2
votes
1
answer
3k
views
Store and Encrypt Contact Form 7 Submissions in Database? [closed]
I have an additional security requirement (in addition to SSL) and I'm looking for a method (either a plugin or custom solution) of how to encrypt and store submissions from Contact Form 7 in the ...
- 157
1
vote
0
answers
1k
views
Auto login subdomain from main domain on single sites with different DB
I would like to auto login to subdomain from main domain as well as from subdomain to main domain (if possible).
I was already able to do this by sending url with encoded params to own php login ...
- 11
-3
votes
2
answers
1k
views
How to get real password (before encrypt) when register a user?
I just need to get real password (before encrypt) when user is registering. I need to save that password in another table. How I access the real password before encrypt?
The reason for it is, I am ...
- 11
0
votes
1
answer
37
views
Not able to log for the first time on a salted WordPress by creating pwd on BD
I've inherited a WordPress project and first thing I tried to do was create a superadmin user by inserting a new user into wp_users and the appropriate permissions into wp_usermeta.
I've done that a ...
- 133
0
votes
1
answer
671
views
Encrypt API key [duplicate]
One of my plugins is using an API key to communicate with an off-page service. However, this API is not encrypted and is therefore visible to everyone with an admin login.
Can I encrypt the API key ...
- 305
0
votes
1
answer
82
views
Retrieve $_POST data to send to javascript without using localize script
I have a situation here where I need to access the $_POST data to send a sensitive string to a javascript without using localize script and also not letting the sensitive string be available in the ...
- 109
1
vote
3
answers
471
views
Sniffing wordpress user's credentials
Coming to WordPress development from more "hardcore" (slow) development, I find it extremely odd that the WordPress login process provides absolutely no defense from sniffing credentials data.
It all ...
user102853
0
votes
1
answer
187
views
Protect Post Permalink From Copy
It is possible to protect my post permalinks to get copy from other users or bots ?
Let's say the post permalinks that tagged with tag "A" to get encrypted and all post to show in browser with:
Post ...
- 11
0
votes
2
answers
937
views
Using an Encryption class in a WordPress Plugin
I'm making a WordPress plugin that works with sensitive data. So I need to store/retrieve date with a trusty encryption method.
I did some searches among many php encryption wrapper classes, and ...
- 109
1
vote
1
answer
459
views
Pass MD5 value to prepopulate field
this is my scenario:
I have a gravity form A where i collect user data and users are automatically registered to my site (via gravity forms user registration plugin). Users then automatically login ...
- 11
7
votes
3
answers
2k
views
Are the default salts secure?
When installing a fresh wordpress, one of the things one should do is, updating the salts in wp-config.php.
The section looks like this
define('AUTH_KEY', 'put your unique phrase here');
...
- 173
4
votes
1
answer
919
views
Security in WordPress plugin development
My plugin is Mailer.app for WordPress, I'm 85% completed and I'm focusing on security before release. Before the questions, I should outline the plugins architecture:
The plugin is able to take in ...
- 143
0
votes
1
answer
1k
views
Is the login encrypted before it is sent? If so how to do I encrypt it the same way?
I've moved my WordPress site onto a https server, but now I'm wondering if I still need to manually encrypt the login credentials for my remote login.
Is the default login encrypted before it is ...
- 920
-3
votes
1
answer
268
views
Why can't I save encrypted data in a transient?
I'm trying to save encrypted data (using AES-256-CBC in PHP) in a transient but for some reason it keeps failing. The transient key is under the required length of 45 characters and the data is not a ...
- 101
-1
votes
1
answer
3k
views
How Wordpress hashes passwords
I found a nice article which explains at a high level how Wordpress hashes it's passwords, but is there a way to know exactly what encryption method from Portable PHP is used?
I am building a ...
- 446
1
vote
2
answers
1k
views
CNAME site attempts to load files over HTTP instead of HTTPS
The main site
https://www.ptacunits.com
loads fine. We have a CNAME pointing from the above domain to the following domain,
https://www.ptacfactoryparts.com
however, the page source shows HTTP ...
- 21
2
votes
2
answers
726
views
Moving away from MD5: Where to declare the custom global $wp_hasher?
I want to move away from using MD5 for hashing passwords in the database. The plan is to declare a custom global $wp_hasher as hinted at in the docs for wp hash password():
Unless the global $...
- 121
0
votes
2
answers
540
views
Apply function to update_option Variable
I found some instructions on encrypting an options field for a plugin here, using:
encrypt($input_string, $key){
$iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB);
$iv = ...
- 559
2
votes
1
answer
112
views
PGP-Encrypt system-generated notifications
I was wondering if there is a way to get Wordpress to encrypt notification mails ("Please moderate ..." and so on) using PGP.
I have found a bunch of plugins providing PGP-encrypted eMail forms, but ...
- 123
3
votes
1
answer
3k
views
Encrypt emails?
We need to maintain HIPPA compliance for forms on our website that are currently mailed to an internal email address. While the user/customers provides the info over HTTPS, we still want to make sure ...
- 131
4
votes
4
answers
18k
views
How to validate WordPress generated password in DB using PHP?
I am working with site that is done with WordPress, and I need to add some parts that are outside WP, and to check user login, Logging users outside WP.
I tried with md5 of password but it's not...
...
- 43
7
votes
3
answers
43k
views
How WordPress encrypt password? [duplicate]
Possible Duplicate:
How to validate WordPress generated password in DB using PHP?
I am working with site that is done with WordPress, and I need to add some parts that are outside WP, and to ...
SharkTheDark
21
votes
3
answers
11k
views
How to store username and password to API in wordpress option DB?
I'm currently developing a plugin and the chances are that I will more than likely release it on the public plugin repository so others can use it.
The plugin will be using an API and to use this API ...
- 12k