Locking Down Wordpress Application Password Permissions / Capabilities

I am working on a Wordpress installation where we recently decoupled the frontend into a NextJS application that is no longer hosted on the same domain as the admin. We are accessing data etc through the API. That's been fine for non-logged in users viewing posts etc. But recently we realized that the "preview post" functionality has been broken, because users who are logged in on the admin side are no longer logged in on the frontend. So they can't …
Category: Web

Authenticate user using Hashed Password in MySQL Query and C#

I am writing a custom component in C# that connects to WordPress database at backend. I am trying to authenticate users via Mysql select query but the hash is not matching. I have tried the answers mentioned here but no luck. Can anyone help me with a C# implementation for generating correct hashed passwords as WordPress does. I am using latest version of WordPress
Category: Web

Free Alternate Wordpress Editor (without requiring plugins)

A few weeks ago I started building a website using the free edition of wordpress because it alowed me to have the site hosting, the domain, and the editor all for free. However later on as my site got a little bigger the wordpress editor/windows app/android app started being extremley laggy to the point where editing was impossible. I have tried for over a week to find an alternative wordpress editor but everything that google gives me requires a plugin …
Category: Web

How to bypass the Easy Digital Downloads checkout process?

I've decided to use Easy Digital Downloads as a base to create a secure download area for a client. The client will be uploading general files such as .pdf's and word documents for their members. What I'd like to do is bypass the checkout process of Easy Digital Downloads so users can download a file straight away, without having to first add a download to their cart, checking out, and then receiving the email with the download link. Is anyone …
Category: Web

Using the WordPress and WooCommerce REST APIs in the same Node app

I am writing a small utility app that connects a 3rd party API to a WooCommerce store (actually, it's multisite, but that's not really relevant) in order to update customer records. The WooCommerce API docs state that the role property is read-only, but I need to update the roles in order to enable role-based pricing on the front-end. It looks like I can edit roles using the core WordPress API, but I'm writing this app using wc-api-node, which is a …
Category: Web

Setting a JSON web token from a secondary api as a secure cookie on WordPress

UPDATE THREE Since I am getting the correct responses from my own api, can I modify the responses I am getting. In the console I see this: {readyState: 4, getResponseHeader: ƒ, getAllResponseHeaders: ƒ, setRequestHeader: ƒ, overrideMimeType: ƒ, …} abort: ƒ (a) always: ƒ () complete: ƒ () done: ƒ () error: ƒ () fail: ƒ () getAllResponseHeaders: ƒ () getResponseHeader: ƒ (a) overrideMimeType: ƒ (a) pipe: ƒ () progress: ƒ () promise: ƒ (a) readyState: 4 responseText: "{"success":true} ↵<!DOCTYPE html> …
Category: Web

How to use WP account on third party module

Our client has an existing website which runs on wordpress. They want a separate module which will be made by us. This module won't be made as a Wordpress plugin and will therefore be hosted on a different server. The WP user can see this module after he is logged in. To see the module it will be loaded by an IFrame. Is it possible to use the WP account of the user to authenticate on this module (for example …
Category: Web

Javascript not working on index.php but it is working on single post's page

I am trying to use mathJax in my wordpress. According to the documentation at mathjax, the mathjax script url needs to mentioned in headers.php. Which is exactly what I did. And right now this is what the head section in the headers.php looks like: <head> <meta charset="<?php bloginfo( 'charset' ); ?>" /> <title><?php wp_title( '|', true, 'right' ); ?></title> <script type="text/x-mathjax-config"> MathJax.Hub.Config({ extensions: ["tex2jax.js"], jax: ["input/TeX", "output/HTML-CSS"], tex2jax: { inlineMath: [ ['$','$'], ["\\(","\\)"] ], displayMath: [ ['$$','$$'], ["\\[","\\]"] ], processEscapes: …
Category: Web

WP Refused to display 'URL' in a frame because it set 'X-Frame-Options' to 'sameorigin'

I'm a beginner to WP development, I'm editing a plugin to add third-party payment gateway when i did the same code in normal php files i didn't had any error and it worked yet in WP cURL didn't follow redirect so i sent it to the front end to show it in IFrame and it works fine and shows the one time password and after sending it it give me the error and says the third-party refused to connect, i …
Category: Web

Is there a tool to see every WordPress site that's using a particular plugin?

Is there a tool to see every WordPress site that's using a particular plugin? For example: if I wanted to know every website in the world that is currently (or historically) using Yoast SEO. I realize this would probably be a third party tool, so I don't know if it's appropriate for this forum. But, I figured it's a good place to ask seeing as it's related to WordPress.
Category: Web

Preparing Hardcopy and Online Page

I am writing a book and I want to post it online (into various web pages) and also want to have a hardcopy. The book has a lot of figures and math equations. How can I prepare the posts to minimize formatting? Currently, I am writing using LaTeX, but I understand it is not efficient at all, because copy and paste from a text file and then formatting for a web page take a lot of time. Is there any …
Category: Web

Release a plugin with composer installed packages

Here I'm looking for an answer about releasing a plugin version with 3rd party packages installed by composer. In my custom plugin I installed Sentry with composer and checked the error logs in my Sentry account. It's working. Everything looks fine. But my biggest concern is that it installed a lot of packages in the vendor folder while I try to install Sentry and Sentry sdk with composer. What will happen if I want to do a version release of …
Category: Web

Can I put in Github the code of a abandoned plugin I want to fork?

My friends. I want to know if I can create a repository of abandoned plugin of wp.org that the author is not mantaining make 2 years. The plugin is this: https://br.wordpress.org/plugins/send-emails-for-woocommerce/ I just want to know if I will have problem with the law if I put it in the Github because is a third party plugin, even if I mantain the author in the readme.txt. Thanks! Edit: https://wordpress.org/support/topic/can-i-takeover-this-plugin-it-seems-to-be-abandoned-after-2-years-w-o-update/
Category: Web

Best practices/popular methods for distributing a program with a plugin?

Are there any best practice guidelines regarding how a plugin should distribute a third-party program with it's own installation? If there are no guidelines, then what are the most popular methods? For example, our plugin requires the installation of a third-party (GPL compatible) program. To ease installation, the third-party program would be included with our plugin and it will offer to run a version of the program that is compatible with their hosting environment that is included in our plugins …
Category: Web

How can I include 3rd party library in Wordpress?

I want to include this library on a single page. I'm pretty new to Wordpress, so I'm not sure how to do this. Is there a plugin which allows one to upload a library and then link to it in HTML of a page/post? I tried uploading the plugin contents to my wp-content/uploads directory, but I always get 404 errors when trying to link to the library files, even though the paths are correct.
Category: Web

Use third party Library in wordpress

The GA third party library works with php 5.5 and above, i have this. They say to install this via Composer, since i am new to php i have no idea where is it located and will this work on WordPress? Please help me here Here is Github's url of Third party Library >> https://github.com/theiconic/php-ga-measurement-protocol According to the third party GA Library DOcumentation, i need to add this code to composer: { "require": { "theiconic/php-ga-measurement-protocol": "^2.0" } } After that …
Category: Web

How to allow users login to WP from external domain and make REST requests

Basically what i want to do is: Use Wordpress as a login system and data storage for web-application on another domain. Make users able to register and perform REST calls from the application. Let users manage their accounts and post contents without using wp-admin at all. For REST Api i found a really nice plugin: http://v2.wp-api.org/ however after using POST method my wordpress is saying: "Sorry, you are not allowed to create new posts." - Because I'm not logged in. …
Category: Web

generate a static copy of the website footer html

Client website uses the service of a third-party content provider to maintain a TV programs page. This provider needs to have access to a file that gives the theme's footer html code. I have managed to give him that, except that the javascript files, which should be in the footer, do not appear in the rendered html code. Here is the complete code, sitting at /path/to/partnerfooter.php define('WP_USE_THEMES', true); require( '../wp-load.php' ); do_action('get_footer'); get_template_part('templates/footer'); wp_footer(); do_action('wp_enqueue_scripts'); // no go ?> </body> …
Category: Web

When wp_schedule_event action has two possible directions, how to avoid an infinite loop?

I'm building a plugin that links WordPress and Salesforce like this (updating here to try to clarify what the plugin does): salesforce_push: send data from WordPress to Salesforce. This happens when a new item (this could be a post, user, etc. depending on map settings) gets created/updated/deleted in WordPress, and that data is sent to the Salesforce API to create/update/delete the mapped object. Mapping occurs based on the ID of the item (user ID to Contact ID, for example). salesforce_pull: …
Category: Web

About

Geeks Mental is a community that publishes articles and tutorials about Web, Android, Data Science, new techniques and Linux security.