You might be able to make your own login form that bypasses the wp_login() function. This page https://codex.wordpress.org/Customizing_the_Login_Form , in the “Make a Custom Login” section, might get you started. There are no hooks that I see in the https://core.trac.wordpress.org/browser/tags/4.8/src/wp-login.php code that you can use to bypass the password field. So creating your own login … Read more
$(“#user_login”).attr({“placeholder” : “User Name”, “required”: “required”});
You can hook into this filter – https://developer.wordpress.org/reference/hooks/check_password/ – and validate if the user submitted password is the same as the user’s custom code field value return true. Example: add_filter( ‘check_password’, function( $check, $password, $hash, $user_id ) { // Run additional checks if current check is false if ( ! $check ) { // Check … Read more
So: a user logs into Google, they are now logged into Google They then go to your site, and login via a social login, they are now logged into your site, and they are logged into google The user logs out of your site, they’re now logged out of your site, but still logged into … Read more
Yes you can, you can easily just ask for a user name and/or email or text/email them their OTP(one time password). This is becoming more popular on mobile apps that ask for just a phone number and text a code to enter for authentication. Examples https://auth0.com/blog/how-passwordless-authentication-works/ https://www.okta.com/security-blog/2018/04/is-passwordless-authentication-actually-secure/ For wordpress auth there are plugins already. https://wordpress.org/plugins/passwordless-login/
You can override pretty much every WooCommerce template by copying them into a folder named “woocommerce” in your theme. This is documented at Template structure & Overriding templates via a theme. The login and register forms non-logged in users see when they click “my account” are genetared by the template file /myaccount/form-login.php So what you … Read more
I’m assuming that where you said “I need help to validate/connect the new custom field to a data column in wp_users called serials” that you actually meant wp_usermeta field where the meta key is “serials”. To validate any additional fields as part of the login, you use the wp_authenticate_user filter. Start by checking to see … Read more
If there is no filter to change the content, the other option is to add a function hooked to gettext – for example: /** * Change text strings * * @link http://codex.wordpress.org/Plugin_API/Filter_Reference/gettext */ function wpse_382257_text_strings( $translated_text, $text, $domain ) { switch ( $translated_text ) { case ‘Check your email for the confirmation link, then visit … Read more
The main cause of this error is that somewhere on your site, it could be your theme or a plugin, someone has incorrectly used certain functions. The error messages themselves describe the problem perfectly well: Scripts and styles should not be registered or enqueued until the wp_enqueue_scripts, admin_enqueue_scripts, or login_enqueue_scripts hooks. Do not deregister the … Read more
The correct answer is to use SSL. However, you could use javascript to encrypt the password somehow before sending it to the server, but this isn’t going to offer much more protection because anyone looking at the data could just as easily unencrypt the password. Here’s more on that: https://stackoverflow.com/questions/12291495/how-to-encrypt-form-data. Use SSL 😉