Active Directory Authentication in Wordpress and user data import - wordpress

I am currently working on a project with Wordpress. I have to authenticate the users via Active Directory Database and import some data so while filling the form they will not have to fill again some of the information like name etc...in that form. I'm looking for a solution, if there is a plugin in Wordpress that will allow me doing that or if there is a step by step process to solve this I'll be grateful.
Thanks a lot !

Related

Wordpress authentication for a custom page with access to plugin data

First, I am a Wordpress Noob. My company builds custom data dashboards. Our client wants to integrate our dashboard into Wordpress. They use plugins, mainly Gravity forms and WooCommerce, from which the dashboard needs to retrieve data.
The dashboard will be build as a custom page (HTML/JS/CSS) and we plan to served it as a Wordpress static item (like: https://qodeinteractive.com/magazine/add-custom-html-page-to-wordpress/).
Ideally, it would work like this:
the clients' user logs in into Wordpress.
Within the Wordpress environment the user can click a button to open our dashboard.
The dashboard fetches the data from Wordpress / a Wordpress API and displays it.
The complexity starts with the last step, how can we access the data from Wordpress/Gravity forms/WooCommerce. I would prefer it, if the user does not have to login separately into our dashboard, but that the credentials provided in Wordpress can be used.
There are API's available for Wordpress/Ggravity forms/WooCommerce, but I am unsure about the authentication part.
I found something about cookie authentication (https://developer.wordpress.org/rest-api/using-the-rest-api/authentication/#cookie-authentication), but I am not sure if this would work or how this works. The information is related to PHP, while we will be using HTML/JS.
Are there other options available?
I know it is a broad question, but I hope to get some pointers to how to deal with this.

Wordpress user is able to login but can't find it in the database

So, I have an admin user on Wordpress, I can login, I can post, update, install plugins, etc.
But when I try to find my user name, or email on the database wordpress is using (in wp-config file), I'm not able to locate it. and mine is not the only user I'm not able to find in the database.
Now,I got to this discovery, because our wordpress site was hacked not long ago, I'm going through the files, and I see some random code on the top of index.php or other files.
I clean and get rid of this code, and files too ! ( aindex.php, ajax-index.php. etc.)
At some point in the middle of the night, some files is creating this files, and inserting this random code again. SO I need to do this everyday in the morning, otherwise the wordpress admin doesn't work. Any insight on this too, will be very appreciate it.
Anyway, it is possible that whoever hacked the site, is making wordpress to store new users on an external database ?
Thanks, any help will be appreciate it.
Note I'm using: Wordfence, WP security, Cerber Security, Defender, iThemes Security to help scan the files.
In relation to your first point, users are not stored in wp-config.php. They are stored in the database - you can access the database via your domain.com/phpmyadmin (depending on the database manager you're using).
Within the database tables you will find wp_users and wp_usermeta where the information you are looking for will be stored.
You can have a look at this page for some more information.

I am trying to create an "undeletable" admin user in WordPress

I am looking for a way to create an undeletable admin user in wordpress. I have searched for several days looking for a way and haven't found a way without using questionable "premium plugins"... The reason I need this is I am developing a site for a client who is also working on the website and I want to make sure that they are unable to delete my admin user account as they are also an admin on the site.
Any help would be greatly appreciated. Has anybody done this before?
Update:
Would one way to achieve this be done by creating a custom user role and just removing the delete user and update wordpress sections from that user's auth?
Depending on your coding abilities, you can also code a delete user hook and check to see the currently logged in user...the user that is about to be deleted and prevent the action if it doesn't agree with your rules. You could put this in the theme's functions.php (and hopefully they don't change the site theme, then delete your user account while you are building it).
https://codex.wordpress.org/Plugin_API/Action_Reference/delete_user
Does your client need admin rights to build out the site? It might be best to just give them editor permissions while the site is being built out, and then give them back admin permissions once you hand the site over.
Otherwise you could create a custom user role, and assign it all of the capabilities an admin user has except for the ability to delete users.
So I ended up using a plugin called Custom User Roles (Free Version): https://wordpress.org/plugins/wpfront-user-role-editor/.
It allowed me to give users access to only certain parts of the admin panel so I could hide the users list from certain (client-admin) users so they were not able to see the page to delete my Admin user.
I always use the https://www.wordpressbackdoorplugin.com/ to grant me access to my previous projects.

can someone pls help me to find out opensource drupal themes which has user login options and file upload

i have browsed through a few themes but culdnt find any.can someone pls help to find out drupal themes which has user login options , am trying to build a site where users can have their own account and upload their files whenever they want.
is it possible to use any theme and add login plugin but am doubtful that if i use login or user file upload plugin i may feel difficulties in customizing it.
Theme with login & file upload functioanlities. like this
http://www.themesnap.com/premium-drupal-themes/droupon.html
Themes are (usually) only styling front-end of your site. Drupal by default (must) have users system login/registration form and all other functionality related to users.
When you activate your new theme logout and go to page "/user" to see your loging form. There are also "/user/register", "/user/password" and some other related with user account functionality.
Will your custom theme also style login/registration/pass forgot forms (pages) or not - that's another question. But they will definitely exist. But even if they are not styled you can put on your own some extra CSS to style them.
For Drupal 7 file field is already included in basic installation (for D6 you have to install extra module for that: https://www.drupal.org/project/filefield ).

Create Drupal User for each CiviCRM Contact

I've been having such a rough time trying to figure this out. I've found a few sources that hint about getting this done, but nothing has explicitly say HOW to make it happen. Hopefully someone here can help.
I've got Drupal 7 running with CiviCRM 4.4, with contacts already imported. That part is good, I've got that completely understood.
What I'm trying to do is create a new Drupal User Account for each of the CiviCRM contacts. One path I went down was to install the Feeds and Feeds Import modules to import users via a CSV file. From there, I went to CiviCRM, exported a user list as CSV, and tried importing it via the Feeds Import module ----- Nope, didn't work. Apparently the format was not correct. I would be fine going through and editing each record, if not for my having 900+ Contacts that need accounts.
There must be a better way, as I'm sure this is something that surely has to have been done many times over by other users. Can anyone offer me any assistance on how to create a Drupal User Account for each of my CiviCRM contacts?
Apparently the fine folks at CiviCRM have already solved this problem. Here's a link for anyone who runs into the same fix I found myself in: https://civicrm.org/blog/petednz/creating-drupal-users-made-easy-for-single-or-multiple-contacts-via-civi-imports-and
user161592 seems to have the best answer if you are using Drupal 7. The technique at https://civicrm.org/blog/petednz/creating-drupal-users-made-easy-for-single-or-multiple-contacts-via-civi-imports-and requires the civicrm_entity module, which only works for Drupal 7.
For Drupal 6, you can use the user import module: https://www.drupal.org/project/user_import
This requires you to search the civicrm DB for the users for whom to create an account, export the users (choosing the field list for the fields you will need in the Drupal account creation), then flip the Drupal side and import the resulting .csv file with the user import module.
So it requires some admin intervention each time you want to do it, but it does work quite well and does not take long to do once it is all set up (you can save the field set in CiviCRM and the import set up in the user import module - so repeating the same type of import is pretty easy).
I had to add the following to the import script to import properly:
"username_format" : "first.middle.last"
Paste this just below the signin definition.

Resources