March 2020
Beginner
660 pages
18h 28m
English
The default WordPress login screen displays messages specific to the error. If you enter the wrong username, it will say that the username doesn’t exist. If you enter the wrong password for a correct username, the message will say the password is incorrect for this user. This is a major security risk as a person or piece of software can easily check and find out the existing usernames in the site and whether the password is correct for any username.
We used the built-in login_errors filter for this implementation. This filter allows us to remove or customize the existing login error messages generated by WordPress. So, we implemented this filter with a custom function called wpcpp_ch12_login_errors ...
Read now
Unlock full access