Hi Please try to use this in your functions.php it will redirect user to login form when user try to access lost password page: add_action(‘init’,’possibly_redirect’); function possibly_redirect(){ if (isset( $_GET[‘action’] )){ if ( in_array( $_GET[‘action’], array(‘lostpassword’, ‘retrievepassword’) ) ) { wp_redirect( ‘/wp-login.php’ ); exit; } } } Or Please follow below approach used from this … Read more
I would think this would change it to a month: add_filter( ‘password_reset_expiration’, function( $expiration ) { return MONTH_IN_SECONDS; }); using the built-in MONTH_IN_SECONDS constant. For a quick testing: add_filter( ‘password_reset_expiration’, function( $expiration ) { return 60; // A minute });
WordPress does NOT use the MD5 hash for passwords anymore. It uses the PHPass library to generate secure password hashes. However, WordPress will support MD5 hashed passwords. On the first login of a user with such a password, it will detect that case and change the password entry to be the newer, more secure, PHPass … Read more
I’ve put together a quick plugin at https://github.com/lumpysimon/wp-force-password-change in response to your question and a recent client request for exactly the same thing. It adds a user meta field on registration, then checks for the presence of this when a user is logged in. If it’s not there, they are redirected to the edit profile … Read more
Password is not unique all the time. According to worst password statistics, password is the most used Password of all time. I’m pretty sure some of your users too use that password. So multiple rows will contain the same hash. Hence its not possible. By the way, this is a weird question.
Here are the logical steps to find out the cause of the problem. Remove the password and load the page, is it showing the page content? If not, the problem is within your page template. Be sure you use the WordPress post loop correctly The the answer of your first question is yes, then we … Read more
Custom protected password page with ACF
If you have access to the PHPMyAdmin login and access: The wp_users table from the list of tables. Then locate your username under the user_login column and click edit. The user_pass is a long list of numbers and letters which is the MD5 hash encrypted version of your password. Select and delete the hash and … Read more
Here’s the solution I came up with that relies on the info already present in the database. Background Each password-protected post stores the password in plaintext in the wp_posts table (in the post_password column). We can use that to query the db for any posts that have that password assigned and get the post info … Read more
TL;DR Remove lost-password under Woocommerce >> Advanced >> Account Endpoints. Remember to clear your cache, if you have that enabled. Comment The solution found in this post As I wrote in the comment, then nothing happend, when I added stuff to my functions.php-file and reloaded the login-page. So I’m not sure what is with all … Read more