wp_signon always passed the password eventhough password is wrong
The wp_signon function is probably working exactly as it is supposed to. What you’re missing is that that other methods of authentication exist, like the browser cookies, and wp_signon will check those too. Is your browser sending your WordPress authentication cookies to your script? The bottom line is that you should not be using wp_signon … Read more