this should do the job, just add it to functions.php or put in a plugin: add_filter( ‘wp_authenticate_user’, ‘my_authenticate_user’, 10, 2 ); function my_authenticate_user( $user, $password ) { // do whatever you want with the $password variable here return $user; }
Had the same issue. This fixed it for me. add_action( ‘wp_login_failed’, ‘my_front_end_login_fail’ ); function my_front_end_login_fail( $username ) { $referrer = $_SERVER[‘HTTP_REFERER’]; if ( !empty($referrer) && !strstr($referrer,’wp-login’) && !strstr($referrer,’wp-admin’) ) { wp_redirect( $referrer . ‘?login=failed’ ); exit; } }
Maybe you can upload wp-login.php again or change your Admin password with sql query: UPDATE ‘wp_users’ SET ‘user_pass’ = MD5(‘PASSWORD’) WHERE ‘user_login’ =’admin’ LIMIT 1;
As written, I’d expect to see https://yoursitename.comwp-login.php as a response . I think you are missing a slash. echo site_url(‘/wp-login.php’, ‘https’)
Here is example code that will log everyone in as ‘autologinuser’. The ‘autologinuser’ needs to be created and given a role prior to using this code. function my_autologin() { if (!is_user_logged_in()) { $uid = ‘autologinuser’; $user = get_userdatabylogin( $uid ); wp_set_auth_cookie($user->ID); wp_set_current_user($user->ID); do_action(‘wp_login’, $user_login); // optional } } add_action(‘init’,’my_autologin’);
Looking at wp-login.php there are two interesting functions called login_header() and login_footer(). The footer one has a login_footer action which runs before the body tag is closed, so if you’re looking to add extra markup it can go there. The login_header() function doesn’t have a convenient action to render more markup, so the simple answer … Read more
Your code works just fine for me, other than small kink that all should be quoted string ‘all’. But as far as WP queue is concerned it’s valid.
Your code contains a mistake in passing arguments to the wp_login_form() function. If you define the arguments after function then the function will be called with the default values, so your arguments will not have any effect. The correct code is below: if (is_user_logged_in()) { echo ‘<div class=”logout”> <p>Hello!<div class=”logout_user”> You are logged in and … Read more
The login form actions are located in wp-login.php here and here. // “login_form_{$action}” login_form_lostpassword login_form_postpass login_form_logout lostpassword_form resetpass_form register_form There’s also the general login_init which will fire for all actions. To enqueue scripts on login, use login_enqueue_scripts. Right after that, login_head will allow you to add custom meta tags, etc. to the <head>. The end … Read more
wordpress do not encrypt anything at client side, but encryption on client side do not help at all with security, it just make password stronger but do not help at all against Main In The Middle, or eaves dropping attacks. No matter how strong is your password encryption, if you send it over HTTP, once … Read more