Questions tagged [encryption]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
0answers
16 views

how to handle premium features in a wordpress plugin?

I am developing a plugin in wordpress. I have a question regarding the premium features. How we can manage premium features between free and paid membership? Are those features already part of ...
1
vote
0answers
58 views

wp_hash_password create a different hash everytime

I've already seen this topic: wp_hash_password unexpected behaviour And the problem is similar. I'm creating an API system where api_key and api_secret are the same as username and user_pwd. The ...
0
votes
0answers
25 views

Public key encryption in wordpress

Is it possible to use public key encryption in wordpress? Let's say I want my plugin to communicate with another plugin on another site. During this communication secrets should be encrypted and sites ...
-2
votes
1answer
239 views

I want to encrypt my WordPress plugin

We have developed a custom WordPress plugin. We want to encrypt the plugin code to protect the data. The plugin file contains 2 main files - The main plugin core file and a .php file. Both the ...
1
vote
0answers
25 views

Display encrypted content on my website

Good day I am new here and to wordpress as well, please can someone tell me how i can automatically hide email addresses displayed on the front page(dynamic Content), see example https://quickleads....
2
votes
1answer
252 views

Can I edit the wp_post > post_content right before its inserted/updated?

I would need to apply some sort of encryption on whatever gets inserted in the wp_post > post_content, so I was wondering if there is a way, either modifying the core (rather not), or using some ...
1
vote
1answer
111 views

Parse form values before sending to options.php

I'm developing a custom plugin, which requires input of authentication data for a remote API, and this data needs to be saved. I want to encrypt it before saving to db. I've added a settings page, ...
0
votes
1answer
506 views

Detect change in site_url and home_url

Is there an easy way to check if the site url or the home url has been updated ? Im looking for a hook that I can preferably plug into. I have a cryptographic function that needs to run only once ...
1
vote
1answer
2k views

Store and Encrypt Contact Form 7 Submissions in Database? [closed]

I have an additional security requirement (in addition to SSL) and I'm looking for a method (either a plugin or custom solution) of how to encrypt and store submissions from Contact Form 7 in the ...
1
vote
0answers
852 views

Auto login subdomain from main domain on single sites with different DB

I would like to auto login to subdomain from main domain as well as from subdomain to main domain (if possible). I was already able to do this by sending url with encoded params to own php login ...
-3
votes
2answers
470 views

How to get real password (before encrypt) when register a user?

I just need to get real password (before encrypt) when user is registering. I need to save that password in another table. How I access the real password before encrypt? The reason for it is, I am ...
0
votes
1answer
24 views

Not able to log for the first time on a salted WordPress by creating pwd on BD

I've inherited a WordPress project and first thing I tried to do was create a superadmin user by inserting a new user into wp_users and the appropriate permissions into wp_usermeta. I've done that a ...
0
votes
1answer
452 views

Encrypt API key [duplicate]

One of my plugins is using an API key to communicate with an off-page service. However, this API is not encrypted and is therefore visible to everyone with an admin login. Can I encrypt the API key ...
0
votes
1answer
63 views

Retrieve $_POST data to send to javascript without using localize script

I have a situation here where I need to access the $_POST data to send a sensitive string to a javascript without using localize script and also not letting the sensitive string be available in the ...
1
vote
3answers
342 views

Sniffing wordpress user's credentials

Coming to WordPress development from more "hardcore" (slow) development, I find it extremely odd that the WordPress login process provides absolutely no defense from sniffing credentials data. It all ...
0
votes
1answer
105 views

Protect Post Permalink From Copy

It is possible to protect my post permalinks to get copy from other users or bots ? Let's say the post permalinks that tagged with tag "A" to get encrypted and all post to show in browser with: Post ...
1
vote
2answers
742 views

Using an Encryption class in a WordPress Plugin

I'm making a WordPress plugin that works with sensitive data. So I need to store/retrieve date with a trusty encryption method. I did some searches among many php encryption wrapper classes, and ...
1
vote
1answer
351 views

Pass MD5 value to prepopulate field

this is my scenario: I have a gravity form A where i collect user data and users are automatically registered to my site (via gravity forms user registration plugin). Users then automatically login ...
6
votes
3answers
2k views

Are the default salts secure?

When installing a fresh wordpress, one of the things one should do is, updating the salts in wp-config.php. The section looks like this define('AUTH_KEY', 'put your unique phrase here'); ...
4
votes
1answer
439 views

Security in WordPress plugin development

My plugin is Mailer.app for WordPress, I'm 85% completed and I'm focusing on security before release. Before the questions, I should outline the plugins architecture: The plugin is able to take in ...
0
votes
1answer
901 views

Is the login encrypted before it is sent? If so how to do I encrypt it the same way?

I've moved my WordPress site onto a https server, but now I'm wondering if I still need to manually encrypt the login credentials for my remote login. Is the default login encrypted before it is ...
-3
votes
1answer
193 views

Why can't I save encrypted data in a transient?

I'm trying to save encrypted data (using AES-256-CBC in PHP) in a transient but for some reason it keeps failing. The transient key is under the required length of 45 characters and the data is not a ...
-1
votes
1answer
3k views

How Wordpress hashes passwords

I found a nice article which explains at a high level how Wordpress hashes it's passwords, but is there a way to know exactly what encryption method from Portable PHP is used? I am building a ...
1
vote
2answers
1k views

CNAME site attempts to load files over HTTP instead of HTTPS

The main site https://www.ptacunits.com loads fine. We have a CNAME pointing from the above domain to the following domain, https://www.ptacfactoryparts.com however, the page source shows HTTP ...
1
vote
1answer
507 views

Moving away from MD5: Where to declare the custom global $wp_hasher?

I want to move away from using MD5 for hashing passwords in the database. The plan is to declare a custom global $wp_hasher as hinted at in the docs for wp hash password(): Unless the global $...
0
votes
2answers
356 views

Apply function to update_option Variable

I found some instructions on encrypting an options field for a plugin here, using: encrypt($input_string, $key){ $iv_size = mcrypt_get_iv_size(MCRYPT_RIJNDAEL_256, MCRYPT_MODE_ECB); $iv = ...
2
votes
1answer
100 views

PGP-Encrypt system-generated notifications

I was wondering if there is a way to get Wordpress to encrypt notification mails ("Please moderate ..." and so on) using PGP. I have found a bunch of plugins providing PGP-encrypted eMail forms, but ...
3
votes
1answer
2k views

Encrypt emails?

We need to maintain HIPPA compliance for forms on our website that are currently mailed to an internal email address. While the user/customers provides the info over HTTPS, we still want to make sure ...
3
votes
4answers
15k views

How to validate WordPress generated password in DB using PHP?

I am working with site that is done with WordPress, and I need to add some parts that are outside WP, and to check user login, Logging users outside WP. I tried with md5 of password but it's not... ...
7
votes
3answers
40k views

How WordPress encrypt password? [duplicate]

Possible Duplicate: How to validate WordPress generated password in DB using PHP? I am working with site that is done with WordPress, and I need to add some parts that are outside WP, and to ...
19
votes
3answers
8k views

How to store username and password to API in wordpress option DB?

I'm currently developing a plugin and the chances are that I will more than likely release it on the public plugin repository so others can use it. The plugin will be using an API and to use this API ...