I’m assuming that where you said “I need help to validate/connect the new custom field to a data column in wp_users called serials” that you actually meant wp_usermeta field where the meta key is “serials”. To validate any additional fields as part of the login, you use the wp_authenticate_user filter. Start by checking to see … Read more
If there is no filter to change the content, the other option is to add a function hooked to gettext – for example: /** * Change text strings * * @link http://codex.wordpress.org/Plugin_API/Filter_Reference/gettext */ function wpse_382257_text_strings( $translated_text, $text, $domain ) { switch ( $translated_text ) { case ‘Check your email for the confirmation link, then visit … Read more
The main cause of this error is that somewhere on your site, it could be your theme or a plugin, someone has incorrectly used certain functions. The error messages themselves describe the problem perfectly well: Scripts and styles should not be registered or enqueued until the wp_enqueue_scripts, admin_enqueue_scripts, or login_enqueue_scripts hooks. Do not deregister the … Read more
The correct answer is to use SSL. However, you could use javascript to encrypt the password somehow before sending it to the server, but this isn’t going to offer much more protection because anyone looking at the data could just as easily unencrypt the password. Here’s more on that: https://stackoverflow.com/questions/12291495/how-to-encrypt-form-data. Use SSL 😉
One way of doing this would be to add the code below to the top of your template file(s): <?php // redirect to login page if user is not logged in if ( !is_user_logged_in() ) : header(‘Location: /wp-login.php’); exit(); endif; ?> There are some subtleties around redirecting in PHP that you may want to consider, … Read more
The wp_logout action fires after the user is logged out. They no longer have a role. However, since WordPress 5.5.0, the hook takes one parameter: the ID of the user who is being logged out. So you might be able to accomplish your goal by using that ID instead of wp_get_current_user(). function redirect_after_logout( $user_id ) … Read more
To achieve this we can prevent admins from being authenticated into the site even with correct login and password unless they are using the WordPress default form instead of the WooCommerce login page. First, we need to distinguish between one form and the other when processing the login request, to do so we need to … Read more
Thanks @Buttered_Toast ! The answer was to use the wp_authenticate hook and put my custom function as argument. I should have thought about it…
This simple to implement, you could put this into functions.php if you want it tied to a theme, or else create your own plugin from this: add_action(‘init’,’my_force_login’); function my_force_login(){ if ( !is_user_logged_in() && !in_array( $GLOBALS[‘pagenow’], array( ‘wp-login.php’, ‘wp-register.php’ ) ) ) { $force_login=get_option(‘my_force_login’); if($force_login){ wp_redirect( wp_login_url() ); exit; } } } For this to work … Read more
First you need your login form. I put this in header.php. <div id=”inline-form” class=”page-login hidden”> <?php wp_login_form( array ( ‘redirect’ => site_url( $_SERVER[‘REQUEST_URI’] ), ‘value_remember’ => true ) ); ?> <a href=”https://wordpress.stackexchange.com/questions/58742/<?php echo esc_url( wp_login_url() ); ?>?action=register”>Register</a><br/> <a href=”<?php echo esc_url( wp_login_url() ); ?>?action=lostpassword”>Lost your password</a> </div> Next your link to login or register. <div … Read more