login - Read For Learn

Using is_user_logged_in() to lock down whole site

Just before any of the frontend template loads, WordPress fires an action – template_redirect. You can use this action hook to show SAML login if user isn’t logged in. This way, you won’t have to put the condition in every template file. // you can place this code in your theme’s functions.php file. add_action( ‘template_redirect’, … Read more

Custom failed login error messages for users based on user role?

You can hook to the wp_login_errors filter. add_filter(‘wp_login_errors’, function($errors, $redirect_to){ if(isset($errors->errors[‘incorrect_password’]) && in_array(‘custom_role’, (array) get_user_by(‘login’, $_POST[‘log’])->roles)){ $errors->errors[‘incorrect_password’][0] = ‘Custom message’; } return $errors; }, 10, 2); EDIT: This should work with WooCommerce login form or any other form that implements wp_signon: add_filter(‘authenticate’, function($user, $username, $password){ if(is_wp_error($user) && isset($user->errors[‘incorrect_password’]) && in_array(‘custom_role’, (array) get_user_by(‘login’, $username)->roles)){ $user->errors[‘incorrect_password’][0] = … Read more

Bypass login page

You can bypass Force Login based on any condition by adding the v_forcelogin_bypass filter to your theme’s functions.php file. You may also use the WordPress Conditional Tags. For example: /** * Bypass Force Login to allow for exceptions. * * @param bool $bypass Whether to disable Force Login. Default false. * @return bool */ function … Read more

Why do I have a reauth=1 redirection loop when I try to log in to WordPress hosted on AWS Fargate?

The issue turned out that the login flow is interrupted because the second HTTP request usually goes to a different container than the container that delivered the wp-login.php login form. The solution is to turn on Sticky Sessions for the AWS Application Load Balancer (ALB) Target Group that serves the Fargate containers.

+ More