Several weeks ago, I attempted to enable OpenID logins on this blog. It didn’t work well. It didn’t work at all. Bad Behavior, which I consider absolutely critical in cutting down the impact of spambots, also broke the chain of redirects/reposts that enable OpenID logins. Now, however, with Bad Behavior 2.0.30 (and 2.0.31), the RPX [...]
I’m now trying the RPX plugin from JanRain to enable OpenID logins on this blog. On the negative side, I’m committed to using BadBehavior to knock down server load from bots and BadBehavior seems to trap the redirect back here from your OpenID provider. If you try to log in with OpenID and get an [...]
In case anyone was still curious following my previous headache post, it is possible to integrate WP2.6 and bbPress 0.9.0.2. I say “possible” because while I’ve got it working as far as I can tell (without having modified core code in either WP or bbP), I haven’t really tested it and it’s a mess. More [...]
¶
Posted 16 August 2008
† 2718.us
§
Web Programming
‡
°
Also tagged: 0.9.0.2, 2.6, action hook, add_action, bbpress, bbpress 0.9.0.2, clear_auth_cookie, cookie, cookies, integration, set_auth_cookie, wordpress, wordpress 2.6, wp2.6
Now, I’m really big on *not* complaining about new versions of things and I especially dislike the practice of complaining about how a new version of WordPress broke some plugin that is of dire importance to someone’s website, but WordPress 2.6 is starting to give me a headache. I’ve already posted thrice about issues with [...]
So, as a followup to parts 1 and 2, per WordPress Trac ticket #7001, WordPress 2.6 has split up the login cookies into three parts: what was the one and only login cookie in 2.5 is now limited to /wp-admin there’s a copy of that one that’s just limited to /wp-content/plugins, for backward compatibility with [...]
¶
Posted 03 August 2008
† 2718.us
§
Web Programming
‡
°
Also tagged: 2.6, action hook, add_action, admin_cookie_path, authentication, auth_redirect, cookie, cookie path, cookie paths, COOKIEPATH, cookies, do_action, hook, is_user_logged_in, plugin, plugin api, security, set_auth_cookie, user, user authentication, user login, wordpress, wordpress 2.6, wp2.6
Having stated the problem and now played further, I’ve got good news and bad news. The good news is that there’s an action hook, ‘set_auth_cookie’, that gets called whenever the cookies are set, so if the stuff for which you want to authenticate is on the same server but at a different path, you can [...]
¶
Posted 29 July 2008
† 2718.us
§
Web Programming
‡
°
Also tagged: 2.6, action hook, add_action, admin_cookie_path, authentication, auth_redirect, cookie, cookie path, cookie paths, cookies, do_action, hook, plugin, plugin api, security, set_auth_cookie, user, user authentication, user login, wordpress, wordpress 2.6, wp2.6
I’ve been hoping for the last hour or two that there’d be just one post on this topic, giving the problem and solution all together, but I have yet to solve it and so I’m just going to post the issue for now, until I have a solution. As a security measure in WP2.6, login [...]
¶
Posted 29 July 2008
† 2718.us
§
Web Programming
‡
°
Also tagged: 2.6, admin_cookie_path, authentication, auth_redirect, cookie, cookie path, cookie paths, cookies, security, user, user authentication, user login, wordpress, wordpress 2.6, wp2.6
I use WordPress as the backbone of a site I run, including using it for user authentication. This means a lot of people who aren’t invovled in running the site are logging in and could see the dashboard. Now, it’s not that there’s anything really secret there, but it makes things look a lot less [...]
I’ve had yet another why-didn’t-anyone-tell-me-sooner moment–child themes in WordPress. From How To Protect Your WordPress Theme Against Upgrades (via Parent Child Themes and How I used a WordPress Child Theme To Redesign My Blog The Smart Way): Problem: You’ve finally found a theme you like but you want to modify it. The modifications are pretty [...]
¶
Posted 03 July 2008
† 2718.us
§
Blogging
‡
°
Also tagged: child, child theme, functions.php, parent, parent theme, style.css, theme, upgrade, wordpress, wordpress theme, wp theme
Somehow (my best guess is it happened with the database update in the WP2.5.1 upgrade), the database secret, stored as “secret” and visible on /wp-admin/options.php, changed making the logins for bbPress and WordPress clobber each other (both apps using the same cookie, but each app rewriting the cookie with its own contents, rather than recognizing [...]
¶
Posted 01 May 2008
† 2718.us
§
Blogging
‡
°
Also tagged: 2.5.1, bbpress, cookie, cookies, database secret, integrate, integration, options.php, secret, upgrade, wordpress, wp2.5.1