WordPress.org

Make WordPress Core

Opened 4 years ago

Closed 19 months ago

Last modified 19 months ago

#17723 closed defect (bug) (invalid)

WP Signon from external resource/php code

Reported by: TeckniX Owned by:
Milestone: Priority: normal
Severity: normal Version: 3.1.3
Component: Users Keywords:
Focuses: Cc:

Description

Wordpress has a lot of different functions available in the codec, such as the wp_signon.

The code to login a user from within the wordpress folder looks like:

$creds = array();
$creds['user_login'] = $username;
$creds['user_password'] = $password;
$creds['remember'] = true;
$user = wp_signon( $creds, false );
wp_set_current_user($user->ID);

If this is done outside of the wordpress user folder, by including the wp-config.php file

including the wp-config, like the following:
global $wpdb;
define('WP_USE_THEMES', false);
require_once '/path/to/www/blog/wp-config.php';
wp();

then the cookies aren't created successfully and you can't properly login/logout a user.

There are a log of constants that set this up, yet the cookies aren't set properly, you are missing the wordpress_logged_in_COOKIEHASH essential cookie.

Such flexible function should work properly

Change History (3)

comment:1 follow-up: @c3mdigital19 months ago

  • Resolution set to invalid
  • Status changed from new to closed

wp_set_auth_cookie() does this. Also when including WordPress you should start with wp-blog-header.php

comment:2 @ocean9019 months ago

  • Milestone Awaiting Review deleted

comment:3 in reply to: ↑ 1 @SergeyBiryukov19 months ago

Replying to c3mdigital:

Also when including WordPress you should start with wp-blog-header.php

I guess wp-load.php is a more common recommendation.

Note: See TracTickets for help on using tickets.