php - How to bypass wordpress login screen -
basically want auto login user in wordpress, when clicks on link in email, bears parameter of either user id, username or email.
i went researching wordpress stores session information after login.
in theme's header.php, when put:
<?php print_r($_cookie); print_r($_session); ?>
and logged in admin, got 1 array of $_cookie, wordpress not use sessions internally.
array ( [wordpress_test_cookie] => wp cookie check [wordpress_logged_in_80d2ab9fd1f16a2a89ddb8a5553b4463] => admin|1391841132|58e4ae330b4ca7aef9d6a8ffa3c3a1fb )
i compared database dumps before , after login, , there no change. this, came conclusion wordpress stores session data in form of cookies.
now bypass login screen of wordpress, when user clicks on link in email.
i want know data stored inside above array of cookies. can create own data dynamically , push in $_cookie array, auto login user.
can throw light on this? not interested in trying plugins. want manually now.
edit: came across this question, talks programmatic login of user, if know username.
well besides fact huge security risk, java script , send post url: www.site.com/wp-admin/admin.php username , password (make sure name variables same name tag on userlogin table in wordpress). think need refresh javascript refresh dir /wp-admin/ .
Comments
Post a Comment