So Wordfence uses JavaScript to add the CAPTCHA fields to the login/registration form, but by default only on https://example.com/wp-login.php. And if you want to add the fields to your form, or integrate the CAPTCHA security with your custom login form, the steps are: Enqueue the (re)CAPTCHA scripts, preferably only on the page having the custom … Read more
It’s tempting to unhide the pass2 input but that’s not enough. In the file /wp-admin/js/user-profile.js the bindPass1() binds it to pass1 that makes writing to it not possible. The pass2 input is then hidden in bindPasswordForm() with $(‘.user-pass2-wrap’).hide(); We can instead add our own input field to validate the password. First we add it via … Read more
Here’s one milder suggestion to try out, assuming different cookie domains, if you’re using WordPress 5.5+ For your development installs, set the getenv environment variable WP_ENVIRONMENT_TYPE or define: define( ‘WP_ENVIRONMENT_TYPE’, ‘development’ ); within the corresponding wp-config-development.php or the name you use for it. Then extend the authentication cookie expiration period for the development installs with … Read more
Yes, you can set up a separate, private blog that requires members to log in. You can do this with a plug-in called Members Only – it’s freely available from the WordPress plug-in repository. Anyone who visits the site who’s not logged in will be directed automatically to the login screen. After users log in, … Read more
In my case it was that my web hosting company was blocking my emails. Let me explain. When I created my WordPress install I used my personal email to create the main user account. That email is a GMail email address like, “[email protected]”. That’s all well and good except if the email is not hosted … Read more
Your option using WP internals would be to use the HTTP API along with wp schedule event Create a scheduled event, something like: register_activation_hook(__FILE__, ‘my_schedule’); add_action(‘execute_my_url’, ‘do_this_daily’); function my_schedule() { $timestamp = //some time you want it to run wp_schedule_event($timestamp, ‘daily’, ‘execute_my_url’); } function do_this_daily() { wp_remote_get( ‘../ =myvideoblog/mvb_main.php&action=processfeed&updatefeed=67’, $args); } This is a simple … Read more
You need to use the get_password_reset_key function (see reference) which will query the database and return the reset password key of the user. Here’s a full working example: add_filter( ‘wp_new_user_notification_email’, ‘custom_wp_new_user_notification_email’, 10, 3 ); function custom_wp_new_user_notification_email( $wp_new_user_notification_email, $user, $blogname ) { $key = get_password_reset_key( $user ); $message = sprintf(__(‘Welcome to the Community,’)) . “\r\n\r\n”; $message … Read more
There’s an app plugin for that, Limit Login Attempts. Some more info available in this wp beginner post: http://www.wpbeginner.com/plugins/how-and-why-you-should-limit-login-attempts-in-your-wordpress/
This is what ended up working for me: Put your script into a .js file and then: add_action( ‘login_enqueue_scripts’, ‘enqueue_my_script’ ); function enqueue_my_script( $page ) { wp_enqueue_script( ‘my-script’, ‘http://domain.com/path/myjs-file.js’, null, null, true ); }
You can add a filter to login_head. As explained in the Codex, add this to your code: function my_custom_login_logo() { echo ‘<style type=”text/css”> h1 a {background-image:url(http://example.com/your-logo.png) !important; margin:0 auto;} </style>’; } add_filter( ‘login_head’, ‘my_custom_login_logo’ );