Category: Projects
Lock All Subscribers Out Of The Dashboard!
Redirect Profile.php To Buddypress Profile!
Force Your Buddypress Users To Use The BP Profile Pages!
So, I installed the Simple Facebook Connect plugin for a client, but I found that its login widget was lacking.
I prefer to use the login with ajax plugin, as it has error reporting and lost pwd functions all from the front page. There is nothing more irritating to me than having users redirected to the login.php page simply because of a miss-typed pwd. In a multi-site environment being redirected to the login page of the top level blog, totally breaks the feel of the sub-blog.
So, I have edited the login with ajax plugin to also use the simple facebook connect ‘connect with facebook’ button. This is an improvment on the SFC widget, as it has on page error reporting ( wrong pwd, etc ), and doesnt need to reload the page on login.
——————-
Requirements:
Simple Facebook Connect for WordPress Installed
Installation:
1) Install SFC WordPress Plugin and Configure
2) Download and Install my Login-With-Ajax-&-SFC Plugin
3) Add Widget Via Widgets Page,Page or Post Shorttag, or Use The Shorttag in the Template Files Itself
Download my Login-With-Ajax & Simple Facebook Connect Widget
I really like the Dashboard Content Management Plugin. Personally I have it auto activated on my wpmu2.9 sites and network activated on my wp3 installs. its big easy buttons really make the dashboard friendly for my clients.
Problem is its not wp3 compatible! ..Until now!
So I decided to update the Dashboard CMS Plugin for WP3 and legacy compatibility. So this plugin will handle WP2.9+, WPMU2.9, and WordPress 3! Enjoy!
*note: I found a wp3 version that does user privilege checks before showing each button. but this version was legacy unfriendly, so i merged the two files together using get_version().
So this version is 2.9 and 3 compatible, and it checks the users level to determine if it should display each button!
Limit Login Attempts WPMU Friendly + Optimized!
I use wordpress mu(2.9+) and I just spent some time reworking the ‘Limit Login Attempts’ Plugin (1.4.1) by Johan Eenfeldt to be more WordPress MU friendly. I will mention that this plugin works FANTASTICLY with wordpress mu 2.9 + …. Other Mu users may find this usefull… A couple things…
first, I set the variables at the top of the plugins .php file i wanted to be global. The file is very well noted by the author, OMG thank you! Very easy to control what variables the plugin activates with thanks to great coding and thoughtful notation.
Then I changed the function that mails lockout notification to the administrator, so that it will email the super site admin(me) rather than that particular sub blogs admin.. what i did was modify the get_option in line394 to say:
@wp_mail(get_site_option(‘admin_email’), $subject, $message);
Then, i changed the code where it constructs the plugins dashboard submenu. I changed it so that it would show under the site admin menu instead of settings. that way only the super site admin can see it and not the sub blog administrators. I changed Line 607 to:
add_submenu_page(‘wpmu-admin.php’, ‘Limit Login Attempts’, ‘Limit Login Attempts’, 10, ‘limit-login-attempts’, ‘limit_login_option_page’);
Then I used the plugin manager to auto-activate the plugin for all users sitewide.. that way any newly generated blogs will automatically activate the plugin with the settings I want, and having moved the menu, users cant modify them.
It is important to note, that if the plugins menu is accessable to your users, they can deactivate the plugin. Rather than attempt to solve this, i will just hope that common sense prevails. Perhaps I will try this in the /mu-plugins/ folder so that it isn’t even an option. I’ll have to test it. hope this helps…
The settings I changed to my liking were;
login attempts moved to 5,
lockout time decreased to 15 min.
lockout log settings changed to ‘log, email’
and notify email after 1 lockout
To Install:
Install ‘Plugin Commander’ or ‘Plugin Management’* (get the wp3 version here )
Install ‘Limit Login Attempts Mu-Ified’ (version above) in /wp-content/plugins/
Auto-Activate ‘Limit Login Attempts’ Via ‘Plugin Management’ or ‘Plugin Commander’
*recommended
IMPORTANT! Requires:
WP 2.9+ (not tested in wp3! ..yet)
Plugin Management
Or Plugin Commander
Plugin Management vs Plugin Commander, With WordPress MU Or Multi-Site
Plugin Management is far superior to Plugin Commander,
- The Problem is, Plugin Management is not WordPress 3 compatible.. Until Now!
So, I was recently working on a clients site. They were using the new wp3 and total commander. I prefer the wpmu dev teams plugin management plugin as I can disable a user from being able to activate a certain plugin.
So this client had a plugin that allowed php to be accepted in text widgets. now this is obviously a large security hole, and should only be available to the super admin (i.e Me). But with wp3, or plugin commander, you cant disable it from the plugin menu! A sub-blog administrator can go to the plugins menu and choose to enable the php widget! BIG problem. So I looked on different threads and found the only advice was ‘disable the plugin menu’, but what if you want your users to be able to enable certain plugins but not others? my users can enable facebook connect, nextgen gallery, twitter connect, etc, etc, but cannot enable any php allowed widgets, or any other unsecure plugins because i am using plugin mangement on wp3!
If this is exciting to you its because the wpmu team says ‘its difficult to find time for things that are free..’ meaning they havnt updated the plugin for wp3 yet. So, i went ahead and did it myself.
basically, wpmu-admin.php was replaced with ms-admin.php. So i made some minor corrections to the php, and voila! WP3 Compatible Plugin Management Plugin!
To Install:
Add the .php to /wp-content/mu-plugins/
IMPORTANT! Requires:
WP 3+
Use the Older Version for anything under wordpress 3.0