Seems as though the session needed to be destroyed with the following: <a href=”https://wordpress.stackexchange.com/questions/66309/<?php $redirect = bloginfo(“url’); wp_logout( $redirect, $echo ); ?>”> Logout </a>
OK, I’ve got it! According to wp codex, second parameter of wp_signon() function refers to whether to use auth cookie or not. So if you use wp_signon( $user_arr, false ); …re-auth will not be required.
Go with Theme My Login. Well written and very functional
Use the is_user_logged_in() conditional to output a different menu depending on user login state. For example: $theme_location = ( is_user_logged_in() ? ‘header_logged_in’ : ‘header_not_logged_in’ ); wp_nav_menu( array( ‘theme_location’ => $theme_location );
You could hook into template_redirect and check a cookie. Just an idea, not tested: add_action( ‘template_redirect’, ‘t5_force_login_after_time_span’ ); function t5_force_login_after_time_span() { $cookie_name=”first_visit”; $now = time(); if ( is_user_logged_in() ) return; if ( empty ( $_COOKIE[‘first_visit’] ) ) { setcookie( $cookie_name, $now, $now + WEEK_IN_SECONDS ); return; } $first_visit = (int) $_COOKIE[‘first_visit’]; if ( ( $now … Read more
You can still get to your login page: http://wayfaroutadventures.com/blog/wp-login.php You probably haven’t done any serious damage. Login to your site over FTP or using some file manager provided by your host and add: define(‘WP_SITEURL’, ‘http://example.com/wordpress’); define(‘WP_SITEURL’, ‘http://’ . $_SERVER[‘HTTP_HOST’] . ‘/path/to/wordpress’); See: http://codex.wordpress.org/Editing_wp-config.php#WordPress_address_.28URL.29 Of course, the addresses need to match exactly what you had before … Read more
You have a number of options at your disposal. Two of which could be; 1) Stop the user from being re-directed to /login and use jQuery to alert the user that their login information is incorrect on the page in which the details were entered. 2) You could have them re-directed to the /login page … Read more
Adding A Login Fail Notice
Just for everybody to know I finally got through this. WordPress was installed in a subfolder and the rewrite rule was partialy wrong, so that the session wasn’t properly recognized from the homepage. I rewrote the rule as it was suppsed to be and now everything works.
I worked out a way to conditionally print a script to the head of the page, but not to actually enqueue it. The code depends on the presence of the wp_shake_js callback that is conditionally added to the login page on login failure. If that hook is present, the assumption is that the login failed. … Read more