Several weeks ago, I attempted to enable OpenID logins on this blog. It didn’t work well. It didn’t work at all. Bad Behavior, which I consider absolutely critical in cutting down the impact of spambots, also broke the chain of redirects/reposts that enable OpenID logins. Now, however, with Bad Behavior 2.0.30 (and 2.0.31), the RPX [...]
A while back, I’d looked at a couple of plugins to automate the announcing of new blog posts on Twitter, but hadn’t really found one that I liked. Today, I found myself playing with really short (one-character) IDNs, which led to thinking about URL shortening, which led to YOURLS, which led back to WordPress and [...]
I’m now trying the RPX plugin from JanRain to enable OpenID logins on this blog. On the negative side, I’m committed to using BadBehavior to knock down server load from bots and BadBehavior seems to trap the redirect back here from your OpenID provider. If you try to log in with OpenID and get an [...]
So, as a followup to parts 1 and 2, per WordPress Trac ticket #7001, WordPress 2.6 has split up the login cookies into three parts: what was the one and only login cookie in 2.5 is now limited to /wp-admin there’s a copy of that one that’s just limited to /wp-content/plugins, for backward compatibility with [...]
¶
Posted 03 August 2008
† 2718.us
§
Web Programming
‡
°
Also tagged: 2.6, action hook, add_action, admin_cookie_path, authentication, auth_redirect, cookie, cookie path, cookie paths, COOKIEPATH, cookies, do_action, hook, is_user_logged_in, plugin api, security, set_auth_cookie, user, user authentication, user login, wordpress, wordpress 2.6, wp, wp2.6
Having stated the problem and now played further, I’ve got good news and bad news. The good news is that there’s an action hook, ‘set_auth_cookie’, that gets called whenever the cookies are set, so if the stuff for which you want to authenticate is on the same server but at a different path, you can [...]
¶
Posted 29 July 2008
† 2718.us
§
Web Programming
‡
°
Also tagged: 2.6, action hook, add_action, admin_cookie_path, authentication, auth_redirect, cookie, cookie path, cookie paths, cookies, do_action, hook, plugin api, security, set_auth_cookie, user, user authentication, user login, wordpress, wordpress 2.6, wp, wp2.6
I use WordPress as the backbone of a site I run, including using it for user authentication. This means a lot of people who aren’t invovled in running the site are logging in and could see the dashboard. Now, it’s not that there’s anything really secret there, but it makes things look a lot less [...]
It seems that some themes that I’d used as the bases for my own themes on my WordPress installs (other than this one) didn’t have <?php wp_footer(); ?> in the footer.php file, like they should, I guess, since that seems to be what the WordPress.com stats plugin needs to register hits. I had been wondering [...]
¶
Posted 01 May 2008
† 2718.us
§
Blogging
‡
°
Also tagged: footer.php, stats plugin, wordpress, wordpress 2.5, wordpress plugin, wordpress.com stats, wordpress.com stats plugin, wp, wp plugin, wp stats, wp2.5, wp_footer
After implementing other pages that used WordPress to authenticate users and deal with access control, I went to move these pages off to a subdomain, and suddenly found that auth_redirect wasn’t quite working right. When auth_redirect is called and doesn’t find a logged-in user, it redirects to login and passes the URI of the current [...]
¶
Posted 16 April 2008
† 2718.us
§
Web Programming
‡
°
Also tagged: 2.5, authentication, auth_redirect, filter, filter hook, login, php, pluggable, user, user authentication, user login, wordpress, wordpress 2.5, wp, wp plugin, wp2.5, wp_redirect, wp_safe_redirect