I am new to this site and I am a designer more so than a programmer. I have thoroughly searched for a fix or answer to this but so far found nothing.
I have a website (www.face.eu.com) that is powered by WordPress. We have customers that can log in to the site in order to download tools.
What I want to achieve is a secure area that the login customers are directed to. So, my idea was to have another installation of WordPress on a sub domain (www.users.face.eu.com) and after logging in they are directed here, the site uses the same theme therefore looks the same.
Is this possible and would it keep the user logged in after the redirect?
If you have a different installation of Wordpress, then no. These two installes have different cookie secrets in wp-config.php and so cannot share a login.
However, you should be able to accomplish this using the Network feature in Wordpress 3, which was previously named WPMU (Wordpress MultiUser). On http://codex.wordpress.org/Create_A_Network is a detailed tutorial on how to get this functioning.
If you have completed these steps, you can spawn a different blog on a subdomain, yet share plugins, themes and users.
Related
This question was asked in 2013, but the answer is out of date (plugin retired).
My question is:
We want to install WordPress multisite with blog1.site.com, blog2.site.com, etc., all having single sign on.
We need to make the transition between the sites seamless so they appear well-integrated as part of one domain.
How can I make the same user logged in one of my sites automatically logged in when visit any other site from network?
I am also searching for a solution to this problem. I also found many SSO outdated/unsupported plugins and do not want to install them for security reasons.
The closest solution I could find is from here
How do I share user logins and roles across the multisite network?
By default, a user who is registered on one site cannot register or be added to another site on the same network. That’s because they are already registered in the shared WordPress database. However, they don’t have any user role privileges on other sites.
You can use third-party plugins like WP Multisite User Sync to sync users across the network. However, you need to be careful as you may end up giving someone admin privileges to a site.
But I haven't tested it thoroughly enough yet to see if it satisfies everything I need and I'm not sure where to deal with the problem mentioned in the article of "you may end up giving someone admin privileges".
If anyone else has a solution closer to the WPMUDEV SSO plugin that would be very helpful. Thanks
I see that third party Wordpress dashboard tools like ManageWP or InfiniteWP have access to entire Wordpress site by installing theirs plugin on that site.
This way they have admin access to my Wordpress site so they can update plugins, do site backup etc.
How this is possible and is it safe?
As far as my knowledge says, ManageWP has two methods of getting admin access to the wordpress site.
Installing a Worker Plugin
Saving Admin username and password
Once they get the admin access, they view the wordpress dashboard in an iframe inside of the ManageWP panel. The rest of the controls happen via third party plugins installed by the ManageWP.
Coming to your next question about if it is safe, As per this link,
We take security very seriously. We had no security-related incidents in our history (and we’ve been around since 2010).
Their serves run over AWS Infra, so we can be sure that they have a solid server security, but I would still recommend not to host any sensitive data over a website which could control your wordpress site completely via admin panel.
I am quite new to this but what I want to do is create a website that is only accessible over wifi. When the user gets to the website(which I will be using wordpress to build) There needs to be a downloads page with an upload button that allows users to instantly add files to that downloads page.
Does anyone perhaps know of a way to do this? or know of any plugins one can use?
Thanx in advance.
For the "Security" part (not accessible thru internet), the best is to have your wordpress website hosted on a local server. It makes it unaccessible from internet and will be fast thru wifi network. You can use the domain name of the computer/server (computername.domain.com) to access your website. If you want to use another name eg:mylocalsite.com, you'll have to use a DNS Server to redirect local visitor to your website.
For the plugin, Since there seems to be a lot of plugins that would do the job, i would suggest you to visit Wordpress plugin repo and select the good one that suits your needs (User login or not, only images or files,etc...)
I am new to web development. I am trying to build a site using wordpress as a cms. As such i want to know whether there is any way to create user accounts, so that people can register with the site and login. We would have an online store and we would like users to be able to save and view orders.
I have seen buddy press, but it only works with some themes. Is there any other option available?
Thanks in advance,
cpv
You can add one of the free plugins such as "Login Logout". This is the one I am currently using and it lets new users register for accounts.
You need to search for it in your plugins tab in wordpress, then install and activate it. Then you need to go to your Widgets tab and include it. Then it should run on your website.
Yes, Wordpress has user management, I suggest you play around with wordpress to understand how it works. Download a few e-commerce plugins or user management plugins and see how it all works.
Buddy press just uses the same user management that wordpress has.
I'm sure the wordpress documentation is a good place to look for more information.
I recently upgraded to WPMU 2.8.6 and ever since, my users can't log in on their individual blogs, but they can log in from the main page.
My site is at blogs.mtwp.net (we're a school district).
So if a user goes to blogs.mtwp.net/BLOGNAME/wp-login.php, their password is rejected. If they go to blogs.mtwp.net/wp-login.php, they can log in and get to the dashboard from there.
But it's not all users. Site admins can get in just fine.
We're using wpDirAuth 1.4 if that makes a difference.
Honestly, I'm stumped. Any help would be very much appreciated. Thanks!
you would seem to have enabled the WPdirauth plugin at the top level blog but not on others. Only your top level blog will have the necessary information to connect to your directory.
Site admins are not typically part of your internal directory - they're a Wordpress user which means they can still log-in ok without needing to connect to Active Directory or whatever you're using.
Enable WPdirauth on all blogs that you need users to login to.
Try reviewing your wp-config file. You should see something like this:
define('SUBDOMAIN_INSTALL', true);
Depending on how you've configured Wordpress, this must be enabled to log in to the dashboard of secondary sites.