authentication - Read For Learn

How to implement Google reCaptcha without installing a plugin?

you can use this function i think it works properly. add_filter( ‘wp_authenticate_user’, ‘verify_recaptcha_on_login’, 10, 3 ); function verify_recaptcha_on_login($user, $password) { $secretkey = “your secret key”; if (isset($_POST[‘g-recaptcha-response’])) { $response = wp_remote_get( ‘https://www.google.com/recaptcha/api/siteverify?secret=”.$secretkey.”&response=” . $_POST[“g-recaptcha-response’] ); $response = json_decode($response[‘body’], true); if (true == $response[‘success’]) { return $user; } else { // FIXME: This one fires if … Read more

Outgoing proxy connection problem

Not sure if this helps, but you can try.. So WordPress’ default HTTP transport is using cURL, and the HTTP class sets the proxy authorization method to CURLAUTH_ANY (see source), which might explain why the Proxy-Authorization: Basic xxxxx… header is missing from the request. And there’s a hook you can try to change the proxy … Read more

Can’t GET draft posts via REST API from headless frontend

Ok, so technically I didn’t solve the issue that prevented me from accessing posts in draft status from an external domain where the frontend is hosted using only nonce values. My guess is that the logged_in cookie was not set/could not be read on the frontend side to verify the nonce value during an external … Read more

Restricting access to content

The easiest way is to use if ( current_user_can( ‘capability’ ) ) // do stuff. You’ll find more about capabilities in the codex. You can also inspect the data some user has attached with normal var_dump() and else. I also got a pretty old plugin for that. But I’m not sure if it still works … Read more

Calling wp_signon doesn’t log the user in

You need to make sure that your code is executed before auth_redirect() is called. In simple words, you need to hook the whole function using setup_theme action. It worked in my case.

WordPress REST API “rest_authentication_errors” doesn’t work external queries?

My custom page template with is_user_logged_in() does not detect that I’m logged in

By removing the ADMIN SSL login in wp-config.php, I solved this. So, remove this: define(‘FORCE_SSL_ADMIN’, true); Read more about this feature here

External system integration with wordpress

Take a look at what wp_parse_auth_cookie() does. You can easily duplicate that given the fact that you have all the Cookie constants available. Still, I’d highly advise against that. In your case, I’d try to integrate as far with WordPress as I can to avoid duplicating an authentication mechanism. You can always use any custom … Read more

Best Way to Enable Two Step Authentication

Trust me, don’t DIY this. Cryptography is not for the faint of heart. Use the Google Authenticator plugin. It’s awesome.

Error when requesting password reset email – wp authentication

Sounds like a server configuration problem, not a WordPress thing. You said you were using Rackspace? I don’t have personal experience with Rackspace but it appears that they have some known issues with the default PHP mail() function. See: http://feedback.rackspace.com/forums/71021-product-feedback/suggestions/1873281-fully-support-php-mail-function- http://www.joshuawinn.com/huge-email-delays-on-rackspace-cloud-sites-dont-use-php-mail/ The primary issue is that sending straight through mail() doesn’t authenticate the sender, using … Read more

+ More