function checkApiAuth( $result ){ $yourEncryptAPIKey = $_GET[‘request’]; if( yourDecryptFn( $yourEncryptAPIKey ) === $realKey ): $result = true; else: $result = false; endif; return $result; } add_filter(‘rest_authentication_errors’, ‘checkApiAuth’);
Your option using WP internals would be to use the HTTP API along with wp schedule event Create a scheduled event, something like: register_activation_hook(__FILE__, ‘my_schedule’); add_action(‘execute_my_url’, ‘do_this_daily’); function my_schedule() { $timestamp = //some time you want it to run wp_schedule_event($timestamp, ‘daily’, ‘execute_my_url’); } function do_this_daily() { wp_remote_get( ‘../ =myvideoblog/mvb_main.php&action=processfeed&updatefeed=67’, $args); } This is a simple … Read more
Getting user names and passwords is a horrible idea I hope no user will actually agree to, but beyond that your idea to do it from JS is going to fail due to CORS, which means you will have to do it in AJAX to your server, and let your server try to login, which … Read more
GET requests, like listing posts, doesn’t need authentication at least you need to get private posts. Your problem is that you are using a route/endpoint that doesn’t exist. In WordPress 4.4, WP REST API infrastructure was merged, endpoints didn’t; they will be merged in WordPress 4.5 (as WordPress 4.6 it seems endpoints are still don’t … Read more
This should do it: add_action(‘plugins_loaded’, function(){ wp_set_current_user(0); },0);
The wp_ajax_{action} hook only fires for logged in users. For logged-out users the action wp_ajax_nopriv_{action} is triggered on an ajax request – so you need to hook into that as well.
Just add this at the top of your file: require_once($_SERVER[‘DOCUMENT_ROOT’].’/wp-blog-header.php’); // If you run multisite, you might nees this to prevent 404 error header(‘HTTP/1.1 200 OK’); Note that the file must be in the same folder as your theme. Then you can use is_user_logged_in before executing the rest of the script. If use is not … Read more
Fetching private posts or custom post types via WP-API with basic authentication
I sent it to you on Twitter, but here it is again. I made this little class to help me do XML-RPC faster. abstract class MZAXMLRPC { protected $calls = Array(); protected $namespace = “myxmlrpc”; function __construct($namespace){ $this->namespace = $namespace; $reflector = new ReflectionClass($this); foreach ( $reflector->getMethods(ReflectionMethod::IS_PUBLIC) as $method){ if ($method->isUserDefined() && $method->getDeclaringClass()->name != get_class()){ … Read more
As pointed out in the comments by @kaiser, your question is very similar to this question. In fact, the question itself holds the answer. To disable all feeds add the following code… function itsme_disable_feed() { wp_die( __( ‘No feed available, please visit the <a href=”‘. esc_url( home_url( “https://wordpress.stackexchange.com/” ) ) .'”>homepage</a>!’ ) ); } add_action(‘do_feed’, … Read more