the Short and sweet way would be to store the post id that they are allowed to edit in custom user meta. Then us wp_update_post and check if the id is in the user meta if so update if not don’t.
One solution might be to directly restrict access to the file on the server, but utilize a url rewrite to display the content — only if the id matches in the request. Obviously this doesn’t answer every question in the scenario but it does provide a proof-of-concept to indirectly convert a url into a file. … Read more
Normally, you’ll get those kinds of results because you have file permissions issues. The files all need to be readable and executable by whatever user the WordPress installation is running as (e.g. on most typical webservers, including if you’re running LAMP/MAMP locally, it’s usually something like the www user and staff group). You’ll need to … Read more
Your form action point to the url in which the login form is displayed, and this is many times not the desired behavior when you write your own login form. You should let the login end point handle the login. The result should be something like <form …. action=”<?php echo esc_url( site_url( ‘wp-login.php’, ‘login_post’ ) … Read more
If this is a medical record, you probably so use a transient download URL for the session when the profile is logged on, and destroy that URL when the users logs off, this ensures that the file is not accessible to others. I used WP Customer Area plugin on a CRM project and found it … Read more
Adding these two lines to the wp-config.php file solved the problem: define(‘FS_CHMOD_FILE’, 0644); define(‘FS_CHMOD_DIR’, 0755);
Although not a question for this place (perhaps try over at StackOverflow https://stackoverflow.com/ ), you could try checking the referring page (although that can be spoofed) setting a cookie on WP and looking for it on the other site (although the 2nd site may not be able to read the first site’s cookie). (added) Domain … Read more
try this: <?php //first check if its the category in question if ($cat == ‘1’) { //then if the user is logged in show the content if (is_user_logged_in()){ the_content(); }else{ //if not show the excerpt the_excerpt(); } }else{ // and if its not the category show the content the_content(); } ?> Update Judging by your … Read more
When you say developer, I immediately assume you mean someone trying to add content to the site? There is a WordPress app that you can add your site to, and add Posts, pages, view stats, etc.
WP doesn’t have a built-in way to restrict permissions this granularly. You can either install plugins, or not. For settings, it depends on where the plugin surfaces its settings. For example, if the settings are under the “Settings” menu, then by default only users with role “administrator” will be able to access and adjust them. … Read more