View Level Plugin and Logging in

  • Hi there,
    I want to use the View Level plugin for a site I am developing for a friend. I have the plugin working correctly, but I can’t work out how to get readers to login.
    If they use the login link that is built in to the standard wp template, it takes them into the admin section of the site. Is there any way I can create another login page, or alter the current one to have it take them back to the main site once they have logged in?
    Hazel

Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter hazyd

    (@hazyd)

    Thanks for the tip, but it didn’t work. I am still getting redirected into the admin section.
    Any other ideas?
    Thanks,
    Hazel

    Thread Starter hazyd

    (@hazyd)

    I worked it out… There is another place that it needs to be changed to ‘index.php’ at line 304 or there abouts.
    Thanks for your help!
    Hazel

    Haze, do you mind sharing where that other place is?

    I’ve tried all this, and am still getting redirected.
    Is anyone kind enough to look at this WHOLE THING and tell me what I am doing wrong?

    <?php
    require('./wp-config.php');
    function login($username, $password, $already_md5 = false) {
    global $wpdb, $error, $tableusers;
    if ( !$username )
    return false;
    if ( !$password ) {
    $error = __('Error: The password field is empty.');
    return false;
    }
    $login = $wpdb->get_row("SELECT ID, user_login, user_pass FROM $tableusers WHERE user_login = '$username'");
    if (!$login) {
    $error = __('Error: Wrong login.');
    $pwd = '';
    return false;
    } else {
    if ( ($login->user_login == $username && $login->user_pass == $password) || ($already_md5 && $login->user_login == $username && md5($login->user_pass) == $password) ) {
    return true;
    } else {
    $error = __('Error: Incorrect password.');
    $pwd = '';
    return false;
    }
    }
    }
    function wp_mail($to, $subject, $message, $headers = '', $more = '') {
    if ( function_exists('mb_send_mail') )
    return mb_send_mail($to, $subject, $message, $headers, $more);
    else
    return mail($to, $subject, $message, $headers, $more);
    }
    if (!function_exists('add_magic_quotes')) {
    function add_magic_quotes($array) {
    foreach ($array as $k => $v) {
    if (is_array($v)) {
    $array[$k] = add_magic_quotes($v);
    } else {
    $array[$k] = addslashes($v);
    }
    }
    return $array;
    }
    }
    if (!get_magic_quotes_gpc()) {
    $_GET = add_magic_quotes($_GET);
    $_POST = add_magic_quotes($_POST);
    $_COOKIE = add_magic_quotes($_COOKIE);
    }
    $wpvarstoreset = array('action');
    for ($i = 0; $i < count($wpvarstoreset); $i = $i + 1) {
    $wpvar = $wpvarstoreset[$i];
    if (!isset($$wpvar)) {
    if (empty($_POST["$wpvar"])) {
    if (empty($_GET["$wpvar"])) {
    $$wpvar = '';
    } else {
    $$wpvar = $_GET["$wpvar"];
    }
    } else {
    $$wpvar = $_POST["$wpvar"];
    }
    }
    }
    $error = '';
    // If someone has moved WordPress let's try to detect it
    if ( dirname('https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']) != get_settings('siteurl') )
    update_option('siteurl', dirname('https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI']) );
    switch($action) {
    case 'logout':
    setcookie('wordpressuser_' . $cookiehash, ' ', time() - 31536000, COOKIEPATH);
    setcookie('wordpresspass_' . $cookiehash, ' ', time() - 31536000, COOKIEPATH);
    header('Expires: Wed, 11 Jan 1984 05:00:00 GMT');
    header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
    header('Cache-Control: no-cache, must-revalidate');
    header('Pragma: no-cache');
    if ($is_IIS)
    header('Refresh: 0;url=wp-login.php');
    else
    header('Location: index.php');
    exit();
    break;
    case 'lostpassword':
    ?>
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
    <html xmlns="https://www.w3.org/1999/xhtml">
    <head>
    <title>WordPress &raquo; <?php _e('Lost Password') ?></title>
    <meta http-equiv="Content-Type" content="text/html; charset=<?php bloginfo('charset'); ?>" />
    <link rel="stylesheet" href="wp-admin/wp-admin.css" type="text/css" />
    <script type="text/javascript">
    function focusit() {
    // focus on first input field
    document.getElementById('user_login').focus();
    }
    window.onload = focusit;
    </script>
    </head>
    <body>
    <div id="login">
    <h1>WordPress</h1>
    <?php _e('Please enter your information here. We will send you a new password.') ?>
    <?php
    if ($error)
    echo "<div id='loginerror'>$error</div>";
    ?>
    <form name="lostpass" action="wp-login.php" method="post" id="lostpass">

    <input type="hidden" name="action" value="retrievepassword" />
    <label><?php _e('Login') ?>: <input type="text" name="user_login" id="user_login" value="" size="12" tabindex="1" /></label>
    <label><?php _e('E-mail') ?>: <input type="text" name="email" id="email" value="" size="12" tabindex="2" /></label>

    <p class="submit"><input type="submit" name="submit" value="<?php _e('Retrieve Password'); ?> &raquo;" tabindex="3" />
    </form>
    </div>
    </body>
    </html>
    <?php
    break;
    case 'retrievepassword':
    $user_data = get_userdatabylogin($_POST['user_login']);
    // redefining user_login ensures we return the right case in the email
    $user_login = $user_data->user_login;
    $user_email = $user_data->user_email;
    if (!$user_email || $user_email != $_POST['email'])
    die(sprintf(__('Sorry, that user does not seem to exist in our database. Perhaps you have the wrong username or e-mail address? Try again.'), 'wp-login.php?action=lostpassword'));
    // Generate something random for a password... md5'ing current time with a rand salt
    $user_pass = substr( MD5('time' . rand(1, 16000) ), 0, 6);
    // now insert the new pass md5'd into the db
    $wpdb->query("UPDATE $tableusers SET user_pass = MD5('$user_pass') WHERE user_login = '$user_login'");
    $message = __('Login') . ": $user_loginrn";
    $message .= __('Password') . ": $user_passrn";
    $message .= get_settings('siteurl') . '/index.php';
    $m = wp_mail($user_email, sprintf(__("[%s] Your login and password"), get_settings('blogname')), $message);
    if ($m == false) {
    echo '' . __('The e-mail could not be sent.') . "
    n";
    echo __('Possible reason: your host may have disabled the mail() function...') . "";
    die();
    } else {
    echo '' . sprintf(__("The e-mail was sent successfully to %s's e-mail address."), $user_login) . '
    ';
    echo "" . __('Click here to login!') . '';
    // send a copy of password change notification to the admin
    wp_mail(get_settings('admin_email'), sprintf(__('[%s] Password Lost/Change'), get_settings('blogname')), sprintf(__('Password Lost and Changed for user: %s'), $user_login));
    die();
    }
    break;
    case 'login' :
    default:
    if( !empty($_POST) ) {
    $log = $_POST['log'];
    $pwd = md5($_POST['pwd']);
    $redirect_to = preg_replace('|[^a-z0-9-~+_.?#=&;,/:]|i', '', $_POST['redirect_to']);
    }
    $user = get_userdatabylogin($log);
    if (0 == $user->user_level) {
    $redirect_to = get_settings('siteurl') . '/wp-admin/profile.php';
    }
    if ( !login($log, $pwd) ) {
    header('Expires: Wed, 11 Jan 1984 05:00:00 GMT');
    header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
    header('Cache-Control: no-cache, must-revalidate');
    header('Pragma: no-cache');
    } else {
    $user_login = $log;
    $user_pass = $pwd;
    setcookie('wordpressuser_'.$cookiehash, $user_login, time() + 31536000, COOKIEPATH);
    setcookie('wordpresspass_'.$cookiehash, md5($user_pass), time() + 31536000, COOKIEPATH);
    header('Expires: Wed, 11 Jan 1984 05:00:00 GMT');
    header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
    header('Cache-Control: no-cache, must-revalidate');
    header('Pragma: no-cache');
    if ($is_IIS)
    header("Refresh: 0;url=$redirect_to");
    else
    header("Location: $redirect_to");
    }
    if( !empty($_COOKIE['wordpressuser_' . $cookiehash]) && !empty($_COOKIE['wordpresspass_' . $cookiehash]) ) {
    $user_login = $_COOKIE['wordpressuser_' . $cookiehash];
    $user_pass_md5 = $_COOKIE['wordpresspass_' . $cookiehash];
    }
    if ( !login($user_login, $user_pass_md5, true) ) {
    if ( !empty($_COOKIE['wordpressuser_' . $cookiehash]) )
    $error = 'Your session has expired.';
    } else {
    header('Expires: Wed, 5 Jun 1979 23:41:00 GMT'); // Michel's birthday
    header('Last-Modified: ' . gmdate('D, d M Y H:i:s') . ' GMT');
    header('Cache-Control: no-cache, must-revalidate');
    header('Pragma: no-cache');
    header('Location: wp-admin/');
    exit();
    }
    ?>
    <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "https://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"&gt;
    <html xmlns="https://www.w3.org/1999/xhtml"&gt;
    <head>
    <title>WordPress &rsaquo; <?php _e('Login') ?></title>
    <meta http-equiv="Content-Type" content="text/html; charset=<?php bloginfo('charset'); ?>" />
    <link rel="stylesheet" href="wp-admin/wp-admin.css" type="text/css" />
    <script type="text/javascript">
    function focusit() {
    // focus on first input field
    document.getElementById('log').focus();
    }
    window.onload = focusit;
    </script>
    </head>
    <body>
    <div id="login">
    <h1>WordPress</h1>
    <?php
    if ($error)
    echo "<div id='login_error'>$error</div>";
    ?>
    <form name="loginform" id="loginform" action="wp-login.php?action=login" method="post">
    <label><?php _e('Login') ?>: <input type="text" name="log" id="log" value="" size="20" tabindex="1" /></label>
    <label><?php _e('Password') ?>: <input type="password" name="pwd" value="" size="20" tabindex="2" /></label>
    <p class="submit"><input type="submit" name="submit" value="<?php _e('Login'); ?> &raquo;" tabindex="3" />
    <?php if (isset($_GET["redirect_to"])) { ?>
    <input type="hidden" name="redirect_to" value="<?php echo $_GET["redirect_to"] ?>" />
    <?php } else { ?>
    <input type="hidden" name="redirect_to" value="wp-admin/" />
    <?php } ?>

    </form>

    </div>
    </body>
    </html>
    <?php
    break;
    } // end action switch
    ?>

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘View Level Plugin and Logging in’ is closed to new replies.