The init hook is too early, so the is_user_logged_in() check is failing. Try using the wp_head hook instead (with a -1 priority). The exit/die function will still prevent the page from loading, but will give you more access to key globals you may need to evaluate. Example: add_action( ‘wp_head’, array(&$this, “autologin”), -1);
Looks like you can, though I’ve never tried. After digging through wp-login.php and a few other files, I found my way to the sanitize_user function and filter. Here’s the function description from /wp-includes/formatting.php (on line 888 as of this writing): Removes tags, octets, entities, and if strict is enabled, will only keep alphanumeric, _, space, … Read more
Can’t be done without a lot of wotk, cookies are sent only to the host doing the login. If your webserver does the login then the browser don’t have the cookies. I guess you can write some script that imports cookies from your seb server to your browser, but that doesn’t sound like something easy … Read more
To stay logged in WP based webapps on iOS devices you simply have to log in and click the remember me option on your webapp wp-login.php page in Mobile Safari at least once.
This seems pretty tricky and it depends very much on your needs. You could either alter the WP database on each install or make 1 3rd party database along with a script that registers them on the WP install and sets their permissions. The 2nd solutions seems better for me. Create a database where you … Read more
Code for checking and blocking LDAP users to reset password. /** * Checks whether a user is LDAP user and restricts to reset password. * * @param bool $allow Whether the password can be reset. * @param int $user_id The ID of the user. * @return bool|WP_Error */ function ldap_restrict_password_reset( $allow, $user_id ) { $user … Read more
After doing some more research, I found this post: how can i embed wordpress backend in iframe. While the question it was asking didn’t relate, the answer that toscho gave did. I’m reposting it here so it can be associated without click through: By default WordPress sends an HTTP header to prevent iframe embedding on … Read more
You can create a login failed action hook, // hook failed login add_action(‘wp_login_failed’, ‘my_front_end_login_fail’); function my_front_end_login_fail($username){ wp_redirect(site_url(). ‘?login=failed’); }
When logging into WordPress with a user account, WordPress checks your credentials against those stored in the database. If they are correct, it then sets a session variable in your browser and you are able to view all areas that check against this session variable to gain access to. Sessions are set on a per … Read more
You can use the gettext filter: /** * Rename the ‘Username’ label in wp-login.php * * @see http://wordpress.stackexchange.com/a/159507/26350 */ add_filter( ‘wp_login_errors’, function( $errors ) { add_filter( ‘gettext’, ‘wpse_change_username’, 99, 3 ); return $errors; } ); function wpse_change_username( $translated_text, $untranslated_text, $domain ) { $old = “Username”; $new = “Jediname”; if ( $untranslated_text === $old ) $translated_text … Read more