You can do this using login_redirect filter. function my_login_redirect( $redirect_to, $request, $user ) { global $user; if ( isset( $user->roles ) && is_array( $user->roles ) ) { //check for admins if ( in_array( ‘administrator’, $user->roles ) ) { // redirect them to the default place //make wp-admin as your default place, if you customized it … Read more
You don’t want to be messing around with that. Look at the following hook: https://codex.wordpress.org/Plugin_API/Action_Reference/wp_login You should do something like: function check_test_user() { // Your code here } add_action(‘wp_login’, ‘check_test_user’); The hook will run as part of the Login process and saves you modifying core WordPress files.
As per OP’s comment: Yes, I have self signed using OpenSSL, now I have the site opening on HTTPS but in browser it still says connection not secure where it is showing HTTPS in the address bar. In that case, it sounds like some links are being called through HTTP while other are being called … Read more
This checkbox is under the supervision of the browser cookies. Users can disable the Save password function globally or on the per-site basis. Also, sometimes browsers ignore this checkbox due to some reasons, especially with some cookie-related add-ons installed. For example, my clean installation of the latest Chrome on Ubuntu 14.04 started to decline to … Read more
You might be able to make your own login form that bypasses the wp_login() function. This page https://codex.wordpress.org/Customizing_the_Login_Form , in the “Make a Custom Login” section, might get you started. There are no hooks that I see in the https://core.trac.wordpress.org/browser/tags/4.8/src/wp-login.php code that you can use to bypass the password field. So creating your own login … Read more
$(“#user_login”).attr({“placeholder” : “User Name”, “required”: “required”});
You can hook into this filter – https://developer.wordpress.org/reference/hooks/check_password/ – and validate if the user submitted password is the same as the user’s custom code field value return true. Example: add_filter( ‘check_password’, function( $check, $password, $hash, $user_id ) { // Run additional checks if current check is false if ( ! $check ) { // Check … Read more
So: a user logs into Google, they are now logged into Google They then go to your site, and login via a social login, they are now logged into your site, and they are logged into google The user logs out of your site, they’re now logged out of your site, but still logged into … Read more
Yes you can, you can easily just ask for a user name and/or email or text/email them their OTP(one time password). This is becoming more popular on mobile apps that ask for just a phone number and text a code to enter for authentication. Examples https://auth0.com/blog/how-passwordless-authentication-works/ https://www.okta.com/security-blog/2018/04/is-passwordless-authentication-actually-secure/ For wordpress auth there are plugins already. https://wordpress.org/plugins/passwordless-login/
You can override pretty much every WooCommerce template by copying them into a folder named “woocommerce” in your theme. This is documented at Template structure & Overriding templates via a theme. The login and register forms non-logged in users see when they click “my account” are genetared by the template file /myaccount/form-login.php So what you … Read more