How to limit the number of forgot password reset attempts in WordPress?

You need put the attempts on user meta, then do check every time user hit reset passwords. add_action( ‘password_reset’, ‘my_password_reset’, 10, 2 ); function my_password_reset( $user, $new_pass ) { $limit=5;// Set the limit here $attempts=(int) get_user_meta($user->ID,”reset_attempts”,true); if($attempts>$limit){ //Do something in here, example redirect to warning page. wp_redirect( “/warning” ); exit; } update_user_meta($user->ID,”reset_attempts”,$attempts++); }

Customize reset password form redirect problem

You can add the following to your functions.php to achieve what you are after. The action init doesn’t seem to fire in time for what you are looking for. if($_GET[‘action’]===’rp’ && strpos($_SERVER[‘REQUEST_URI’],’wp-login.php’)) { $key = isset( $_GET[‘key’] ) ? $_GET[‘key’] : ”; $login = isset( $_GET[‘login’] ) ? $_GET[‘login’] : ”; wp_redirect( site_url( ‘/reset-password/’ ) … Read more

Reset WordPress website

One way to solve this would be to set up your demo site exactly how you want it to reset every day (use a standard username and pass like “admin” and “testpass”), and then dump the database and zip the files. Then, put the zip somewhere on your server. Set up a BASH script that … Read more