I figured this one out finally. It turns out that the data in the wp_usermeta table for user_id=1 (admin) was corrupted. This was apparently causing the SSL redirect issue when trying to login to any domains. Once I restored the proper data for user_id=1 into wp_usermeta, everything worked fine. I would much rather have WordPress … Read more
If you are using a newer version of WordPress, you’ll see that you can’t both edit the same page/post because it will show that as locked (you can take over though). I agree that a separate admin account would be good. WordPress is designed to support many users logged in and active. The only issue … Read more
4.0 made a change to the structure of the authentication cookie and added a “token” feild to it. I assume that you were logged out because your older style cookie didn’t match the new format.
Wrangled up some things to check: @otto via comment on this post Look at the login page’s HTML source. Is there anything at all before the initial DOCTYPE line? Even a blank line? If so, then you have some piece of code creating output before the headers are made, in which case this prevents it … Read more
Add this filter to change how blank username/password is treated: add_filter( ‘authenticate’, ‘custom_authenticate_username_password’, 30, 3); function custom_authenticate_username_password( $user, $username, $password ) { if ( is_a($user, ‘WP_User’) ) { return $user; } if ( empty($username) || empty($password) ) { $error = new WP_Error(); $user = new WP_Error(‘authentication_failed’, __(‘<strong>ERROR</strong>: Invalid username or incorrect password.’)); return $error; } … Read more
Do this on template_redirect hook. You can use wp_safe_redirect to redirect to different page in the blog. I can’t give you the code because I don’t from where you are getting the $user
If you read the documentation on wp_login_url, you can specify a redirect URL without having to use that hidden input field. Alternatively, you could just use the wp_login_form function to do exactly what you want: <?php wp_login_form(); ?> Just toss that in there in place of your form, and read the documentation on that function … Read more
Since version 3.4 (or earlier?) WordPress sends a special HTTP header (not in HTML) on login and admin pages: X-Frame-Options: SAMEORIGIN So your browser will show you some text built into the browser, not sent from WordPress. From wp-includes/default-filters.php: add_action( ‘login_init’, ‘send_frame_options_header’, 10, 0 ); add_action( ‘admin_init’, ‘send_frame_options_header’, 10, 0 ); You could create a … Read more
If I were you, I would use the wp_login_form function to create your form, but it looks like you got everything right, and maybe you have a good reason to use a manual form. <?php wp_login_form(); ?> Either way, you can use this action to update the login redirect, add it to functions.php: add_action( ‘login_redirect’, … Read more
When a POST is set to private, non-logged in users will receive a 404 message. If you dump the global variable $wp_query, var_dump($wp_query); ..you will notice that no post_status is present in the parameters returned therefore using the slug (or name parameter of query_vars array for example) we can get the post status of the … Read more