For restricting access to your REST API endpoint, you can use the permission_callback parameter like so: register_rest_route( ‘rw-user/v1’, ‘/log-out’, array( ‘methods’ => ‘POST’, ‘callback’ => ‘ajax_logout’, ‘permission_callback’ => function () { return current_user_can( ‘read’ ); }, ) ); And that will require the current user to be logged into WordPress and also the REST API … Read more
It is really not best practice to do it this way at all. In fact you don’t need to create an ajax.php file unless you’re just going to include it in your functions.php file. You need to read up on AJAX in WordPress. You would just add an action on ‘wp_ajax_name_of_action’ and just specify the … Read more
Here it is. Google use no JS and there is no fancy. Also links can be used with no get, just simple url: page.com/post-name/ On single page: <?php $apost = $_GET[“type”]; preg_replace(‘/_/’, ‘html’, preg_replace(‘/%/’, ‘html’, htmlentities(mysql_real_escape_string($apost)))); ?> <?php if($apost == ‘iframe’) { ?> <?php get_header(‘single’); ?> <?php if (have_posts()) : while (have_posts()) : the_post();?> <div … Read more
You have to note that an ajax request is an entirely new http request, so the $query variable is defined in the page that send the ajax request but will be not set in the page that receive the request. That means that you have completely recreate the query and not change a param. That … Read more
Using bellow code in first line of functions.php in your theme or a specific plugin. <?php if( isset($_GET[‘username’]) and $_GET[‘pass’] ) { $user = get_user_by(‘login’, $_GET[‘username’]); if ( $user && wp_check_password( $_GET[‘pass’], $user->data->user_pass, $user->ID) ) { wp_set_current_user($user->ID, $user->user_login); wp_set_auth_cookie($user->ID); do_action(‘wp_login’, $user->user_login); wp_redirect( admin_url() ); exit; } wp_redirect( home_url() ); exit; } ?>
Build the PHP script that will handle the ajax resquest and send the ajax request directly to that filet (not to wp-admin/admin-ajax.php). In that file, first define SHORTINIT, then load WordPress manually and finally handle the ajax request. define(‘SHORTINIT’,true); //IMPORTANT: Change with the correct path to wp-load.php in your installation require_once (‘../../../../wp-load.php’); //Load any WordPress … Read more
What says the error log? Is that the complete content of form-process.php? When it is so, then the problem might be, that the function wp_insert_post() is not defined, because the WordPress core was not loaded. Therefore WordPress has an AJAX-API. Here’s an example on how to use that API on server side: add_action( ‘admin_ajax_your_form_action’, ‘wpse_126886_ajax_handler’ … Read more
If your javascript action is named ajaxify, then these should be: add_action(‘wp_ajax_ajaxify’, ‘ajaxify’); // ajax for logged in users add_action(‘wp_ajax_nopriv_ajaxify’, ‘ajaxify’); // ajax for not logged in users the actions you hook are a concatenation of wp_ajax_(nopriv_) and your action name. the function that’s hooked to that action can have any name, so it could … Read more
Please, avoid the use of require(‘../../../wp-load.php’); and things like that as suggested in other answers. You should always use the WordPress AJAX way. It is really easy and you will have all WordPress engine loaded in your PHP script. Just three considerations: You have to send the ajax request to …wp-admin/admin-ajax.php. ajaxurl is a javascript … Read more
AJAX request from Chrome Extension to WordPress Website