Here is example code that will log everyone in as ‘autologinuser’. The ‘autologinuser’ needs to be created and given a role prior to using this code. function my_autologin() { if (!is_user_logged_in()) { $uid = ‘autologinuser’; $user = get_userdatabylogin( $uid ); wp_set_auth_cookie($user->ID); wp_set_current_user($user->ID); do_action(‘wp_login’, $user_login); // optional } } add_action(‘init’,’my_autologin’);
Looking at wp-login.php there are two interesting functions called login_header() and login_footer(). The footer one has a login_footer action which runs before the body tag is closed, so if you’re looking to add extra markup it can go there. The login_header() function doesn’t have a convenient action to render more markup, so the simple answer … Read more
Your code works just fine for me, other than small kink that all should be quoted string ‘all’. But as far as WP queue is concerned it’s valid.
Your code contains a mistake in passing arguments to the wp_login_form() function. If you define the arguments after function then the function will be called with the default values, so your arguments will not have any effect. The correct code is below: if (is_user_logged_in()) { echo ‘<div class=”logout”> <p>Hello!<div class=”logout_user”> You are logged in and … Read more
The login form actions are located in wp-login.php here and here. // “login_form_{$action}” login_form_lostpassword login_form_postpass login_form_logout lostpassword_form resetpass_form register_form There’s also the general login_init which will fire for all actions. To enqueue scripts on login, use login_enqueue_scripts. Right after that, login_head will allow you to add custom meta tags, etc. to the <head>. The end … Read more
wordpress do not encrypt anything at client side, but encryption on client side do not help at all with security, it just make password stronger but do not help at all against Main In The Middle, or eaves dropping attacks. No matter how strong is your password encryption, if you send it over HTTP, once … Read more
WordPress uses custom wp_mail function, so you won’t find it, if you’ll search for mail.You should find retrieve_password_message filter call there. This is the filter that returns the content of reset password message. // Change the message/body of the email add_filter( ‘retrieve_password_message’, ‘rv_new_retrieve_password_message’, 10, 4 ); function rv_new_retrieve_password_message( $message, $key, $user_login, $user_data ){ /** * … Read more
The blank page means there’s a server error, check the error logs, or add the following line to your wp-config.php file to get them to show on screen. define( ‘WP_DEBUG’, true ); That will show you the errors so you can start debugging. OR It happens because the theme or plugins that you installed are … Read more
Because there is no wp-admin.php file in WordPress: You shouldn’t be able to login via wp-admin.php, it should not exist! Be extremely suspicious of this file, you may have been hacked, and have likely leaked your details to an attacker.
While login_form_top is a valid hook called by the wp_login_form function, wp_login_form is not used in wp-login.php, nor is that function used anywhere else that I can find. I greped my entire 3.5.1 install and found one reference to the function– the place where it is defined. It does not appear to actually be used … Read more