Context Navigation

← Previous Ticket
Next Ticket →

#17723 closed defect (bug) (invalid)

WP Signon from external resource/php code

Reported by:	TeckniX	Owned by:
Priority:	normal	Milestone:
Component:	Users	Version:	3.1.3
Severity:	normal	Keywords:
Cc:		Focuses:

Description

Wordpress has a lot of different functions available in the codec, such as the wp_signon.

The code to login a user from within the wordpress folder looks like:

$creds = array();
$creds['user_login'] = $username;
$creds['user_password'] = $password;
$creds['remember'] = true;
$user = wp_signon( $creds, false );
wp_set_current_user($user->ID);

If this is done outside of the wordpress user folder, by including the wp-config.php file

including the wp-config, like the following:
global $wpdb;
define('WP_USE_THEMES', false);
require_once '/path/to/www/blog/wp-config.php';
wp();

then the cookies aren't created successfully and you can't properly login/logout a user.

There are a log of constants that set this up, yet the cookies aren't set properly, you are missing the wordpress_logged_in_COOKIEHASH essential cookie.

Such flexible function should work properly

Change History (3)

#1 follow-up: ↓ 3 @c3mdigital
13 years ago

Resolution → invalid
Status new → closed

wp_set_auth_cookie() does this. Also when including WordPress you should start with wp-blog-header.php

#2 @ocean90
13 years ago

Milestone Awaiting Review

#3 in reply to: ↑ 1 @SergeyBiryukov
13 years ago

Replying to c3mdigital:

Also when including WordPress you should start with wp-blog-header.php

I guess wp-load.php is a more common recommendation.

Note: See TracTickets for help on using tickets.

Download in other formats:

Make WordPress Core