从另一个站点自动登录到 wordpress 仪表板 [英] automatic login to wordpress dashboard from another site

问题描述

我想从另一个站点自动登录到 WP 管理员/仪表板，而无需通过登录过程.我尝试了以下操作，但没有成功:

I want to log in automatically to WP admin/dashboard from another site without going thru the login process.. I've tried the following but with no luck:

<?php

$username="admin";
$password="mypasw";
$url="http://example.com/";
$cookie="cookie.txt";

$postdata = "log=". $username ."&pwd=". $password ."&wp-submit=Log%20In&redirect_to=". $url ."wp-admin/&testcookie=1";
$ch = curl_init();
curl_setopt ($ch, CURLOPT_URL, $url . "wp-login.php");
curl_setopt ($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt ($ch, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.6) Gecko/20070725 Firefox/2.0.0.6");
curl_setopt ($ch, CURLOPT_TIMEOUT, 60);
curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1);
curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);
curl_setopt ($ch, CURLOPT_COOKIEJAR, $cookie);
curl_setopt ($ch, CURLOPT_REFERER, $url . "wp-admin/");
curl_setopt ($ch, CURLOPT_POSTFIELDS, $postdata);
curl_setopt ($ch, CURLOPT_POST, 1);
$result = curl_exec ($ch);
curl_close($ch);
echo $result;
exit;


?>

这有点像只向我显示仪表板页面，但我并没有真正登录，因为单击管理页面上的任何按钮只会重定向到与站点页面相同的页面..:(

It's kind of like only showing me the dashboard page but I'm not really logged in since clicking on any buttons on the admin page is only redirecting to same page which is the site page.. :(

推荐答案

如果您有权访问您尝试登录的网站的文件.您可以添加自动登录 php 脚本并将用户名和密码 $_POST 到此脚本，例如:

If you have access to the files of the website where you trying to login. You could add a auto login php script and $_POST the username and password to this script, example:

if ($_POST) {

    $errors = array();

    $username = esc_sql($_REQUEST['username']);
    $password = esc_sql($_REQUEST['password']);
    $remember = esc_sql($_REQUEST['rememberme']);
    $remember = ($remember) ? "true" : "false";

    $login_data = array();
    $login_data['user_login'] = $username;
    $login_data['user_password'] = $password;
    $login_data['remember'] = $remember;
    $user_verify = wp_signon($login_data, true);

    if (is_wp_error($user_verify)) {
        $errors[] = 'Invalid username or password. Please try again!';
    } else {
        wp_set_auth_cookie($user_verify->ID);
        wp_redirect(admin_url());
        exit;
    }

}

Wordpress 代码参考:

Wordpress codex references:

• 登录功能:http://codex.wordpress.org/Function_Reference/wp_signon
• 为管理员登录设置 cookie http://codex.wordpress.org/Function_Reference/wp_set_auth_cookie
• 获取管理页面网址:http://codex.wordpress.org/Function_Reference/admin_url

希望有帮助.

$wpdb->e​​scape 自 Wordpress 3.6 版起已弃用，请改用 wpdb::prepare() 或 esc_sql()！我已将代码更改为使用 esc_sql().

$wpdb->escape is deprecated since Wordpress version 3.6, use wpdb::prepare() or esc_sql() instead! I've changed the code to use esc_sql().

• esc_sql():http://codex.wordpress.org/Function_Reference/esc_sql

这篇关于从另一个站点自动登录到 wordpress 仪表板的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！