We can also use the filter wp_login_errors available in wp-login.php to do the above. Using the same filter you can customize other error messages too like registration, checkmail etc. Use the below code in the active theme’s functions.php file add_filter( ‘wp_login_errors’, ‘override_incorrect_password_msg’, 10, 2 ); function override_incorrect_password_msg( $errors, $redirect_to ) { if( isset( $errors->errors[‘incorrect_password’] ) … Read more
I continued looking for an answer elsewhere, and found one. Basically, the “cookie domain origin policy” was the issue, not sign-in process. I was calling domain.com/wp-admin/admin-ajax.php from a subdomain fr.domain.com. I called fr.domain.com/wp-admin/admin-ajax.php instead, and that worked.
WordPress handles login failed in two ways: If it is a bad credential, and both username and password have a value, then this action can be captured by wp_login_failed If both, or one, of the options are empty, then WordPress generates the error object as the first parameter in the authenticate filter; it does not … Read more
You’re probably running into a problem with $current_user->id being deprecated since WordPress 2.1. Specifically, I get this notice in the error log: Notice: WP_User->id was called with an argument that is deprecated since version 2.1! Use WP_User->ID instead. in /xxx/xxx/public_html/wordpress/wp-includes/functions.php on line 2923. Use $current_user->ID instead. Or you may be able to use get_current_user_id(): add_action( … Read more
Now what baffles me is according to logs they all them seem to have logged-in directly to WordPress as if they know the password (since it’s only one login attempt in line 16 above). This is true even for sites only up one day ago and the passwords are not simple ABCs. It is also … Read more
To remove WP native username/password authentication use the code below. It can be added to the theme (functions.php), to a plugin, or mu-plugin. Just make sure you have another authentication module working before you disable WP native auth. remove_filter(‘authenticate’, ‘wp_authenticate_username_password’, 20, 3);
Since this is not a standard feature you could achieve this with your own css and js you could add to the page like this <?php function custom_login() { echo ‘<link rel=”stylesheet” type=”text/css” href=”‘.get_bloginfo(‘template_directory’).’/custom-login/custom-login.css” />’; echo ‘<script src=”https://ajax.googleapis.com/ajax/libs/jquery/1.8.0/jquery.min.js”></script>’ echo ‘<script type=”text/javascript” src=”‘. get_bloginfo(“template_url”) . ‘/js/yourScript.js”></script>’; } add_action(‘login_head’, ‘custom_login’); ?> change jquery url as wanted to … Read more
Proper hooks for login and register actions: <?php function custom_plugin_hooks() { add_action( ‘login_form’, ‘custom_plugin_form_inputs’ ); add_filter( ‘authenticate’, ‘custom_plugin_login_check’, 100, 3 ); add_action( ‘register_form’, ‘custom_plugin_form_inputs’ ); add_action( ‘register_post’, ‘custom_plugin_registration_check’, 100, 3); } custom_plugin_hooks(); function custom_plugin_form_inputs() { echo “\n”.'<p>’; echo ‘<label>Custom input: <br />’; echo ‘<input type=”text” name=”custom-input” class=”input” value=”” />’; echo ‘</label></p>’.”\n”; } function custom_plugin_login_check($user, $username, … Read more
In your plugin you would first set the redirect URL either to nothing: $redirect=””; or the fully qualified URL of the page you want your user to land on after successfully changing their password. For http://example.com/mypage/ you would use: $redirect=site_url( ‘/mypage/ ‘ ); Then your form would be: <form name=”lostpasswordform” id=”lostpasswordform” action=”<?php echo wp_lostpassword_url(); ?>” … Read more
Finally, I found the solution: form.php <form action=”<?php echo bloginfo(‘template_directory’); ?>/pp-redirect.php” method=”post”> Event: <input name=”event” type=”text” size=”25″ /><br /> Passwort: <input name=”post_password” type=”password” size=”25″ /><br /> <input name=”submit” type=”submit” value=”Los” /> </form> pp-redirect.php <?php /** Make sure that the WordPress bootstrap has run before continuing. */ require( dirname(__FILE__) . ‘./../../../wp-load.php’); global $wp_hasher; if ( empty( … Read more