lumpysimon / wp-force-password-change Goto Github PK

Add an admin page where administrators can force all users to change their password next time they log in. Could be useful for example if your site has been hacked and you want everyone to change their passwords.

Would probably need to be able to specify which roles it applies to.

Maybe also with the option to email users?

Hi Simon, I changed the redirect page to point to a front end Edit Account page on a WooCommerce site I'm devleloping. At log in or registration, now I end up with a redirect loop and can't quite figure out why. Have you tried this before? Any ideas?

Thanks,
-Jibran

Add a checkbox to the user edit screen that will force a user to change their password next time they log in.

There are some plugins like buddypress that use a higher priority for template_redirect by default. If this is the case, the template_redirect from this plugin will be ignored.

Hi, i installed your plugin and it caused error too many redirects?

thanks

Hi Simon, thanks for your plugin ! But I try to change the redirect url to a custom page with a form added by the shortcode from pippinplugins. So I try as jibranb said, with changing the url but it doesn't work and I'm always redirected to the wp-admin/profile page.
This is the code :
`function redirect() {

	global $current_user;

	if ( is_admin() ) {
		$screen = get_current_screen();
		if ( 'profile' == $screen->base )
			return;
		if ( 'plugins' == $screen->base )
			return;
	} else {
    global $wp;
    $current_url = add_query_arg( $wp->query_string, '', home_url( $wp->request ) );
    if ( strpos( $current_url, 'connexion-collaborateur' ) ) {
        return;
    }
}

	if ( !is_user_logged_in() )
		return;

	wp_get_current_user();
if ( get_user_meta( $current_user->ID, 'force-password-change', true ) ) {
    wp_redirect( get_site_url() . '/changement-mdp' );
    exit; // never forget this after wp_redirect!
}

}`

Would you say me what is wrong ?
After that, I'll have an other question ;-)

Thanks a lot !!

If I deactivate the plugin, I can't get back the original email message for password as new user is created.

Hi @lumpysimon,

¿Is there any repo where i can download old versions of this plugin?

I've got a script that checks and downloads a concrete version (used to be 0.5) using @wp-cli but it doesn't work anymore because there are no previous versions available neither here nor at wordpress.com 😞

Regards.