The wp_login hook you are using only triggers when a user login, while we need to trigger function when user changed their role. The correct for this will be set_user_role hook. Please update your code with the given code so User will logout on changing the role. function logout_pending_users( $user_id, $new_role, $old_roles ) { // … Read more
Nonce verification problem when logging in after a logout
Logout and redirect WordPress user id without he refresh the page
After a bit of research I’ve fixed the problem I had with the redirect after logout. I’ve added this code to my functions file and it will use two filters to modify the default beahviour of wordpress after an user do the logout /* Logout URL Fix */ function custom_logout_url( $logout_url, $redirect ) { $logout_url … Read more
I think the article’s logout hook is wrong on two or three counts: it needs ?action=logout, similar to the lost password link it needs a generated nonce too it doesn’t respect the $redirect argument. Here’s a new version based on the current wp_logout_url() code: add_filter( ‘logout_url’, ‘my_logout_page’, 10, 2 ); function my_logout_page( $logout_url, $redirect ) … Read more
If you are just trying to logout a user and redirect them back to the homepage, could you just use the wp_logout() function? So instead of this: if ( is_page_template( ‘templates/template-logout.php’ ) ) { $logout_url = wp_logout_url( home_url() ); wp_safe_redirect( $logout_url ); // Logout and Redirect to homepage exit; } Your logic could just be: … Read more
You can use wp_logout_url() function for logout link. It will automatically add nonce to the url. Try this code: add_action(‘template_redirect’, function() { if (empty($_SERVER[‘REQUEST_URI’])) return; $uri = $_SERVER[‘REQUEST_URI’]; if (preg_match(‘#^/log-out/?$#’, $uri, $matches) === 1) { $logout_url = str_replace(‘&’, ‘&’, wp_logout_url()); wp_safe_redirect($logout_url); die; } }); If you do not want to use wp_logout_url(), then try to … Read more
The body element already gets a logged-in class that you can use to hide the element with regular CSS. body:not(.logged-in) #elementor-element-f4e5a8e { display: none; } If the ID is dynamic and isn’t always the same you’ll need a different selector to target the element, but that would still just require standard CSS techniques that have … Read more
Inconsistent login state
First answer this question: Why bypass the WordPress login/auth system? What’s the end-game here? I would highly recommend against using PHP sessions to maintain user state in the WordPress world. More likely than not, a cookie will be sufficient. For using cookies, you can use the PHP setcookie() function to set cookies, and the $_COOKIE … Read more