Not a programmer sorry.

Currently I can only get the 1 exception to pass through and have tried rearranging the code to allow more but just break the page each time.

Could someone provide a way to allow multiple pages. example to include page1, page2, etc.

Thank you very much

Hi,

Is it possible to show the “lost password” url under the form?

Thanks!

Hello
thanks for your plugin, simple and functional!
However I ask you is there a way to access the front-end page like that of woocomemrce for example. So as to leave the original wordpress login page safe.

Thank you

Hi there, I see that a very similar topic was started recently but different to that, users on my site are not getting the message about Rest API, but instead are simply redirected to the login page by Force Login. They can not even access the reset page to enter their email or username.

Strange: I tested the password reset function last year when I set up Force Login and it was working fine. But I also see that Force Login was not updated recently, so maybe this problem does appear now due to WordPress updates, I guess.

Before, one simple line in the “Allowed” array for Force Login was enough:

home_url( '/my-account/lost-password/*' )

The reset page was accessible as well as the password reset links which look like this: ” https: //site.com/my-account/lost-password/?key=ZT4qvXYclSdFqK3FGK6N&id=74 “

Now I added one line to the Allowed list, the same without asterisk, and at least the reset page is accessible again, but the reset links still do not function. What can I do to fix this?

• This topic was modified 3 months, 1 week ago by w-sky. Reason: trying to remove the active link from example url

I have a potential conflict with The Events Calendar Pro. I reached out to them and they told me they believe something is blocking the REST API, which is why my calendar will not progress. In testing I found a potential conflict with Force Login. I recorded this video to show you what I’m seeing and to see if you had any thoughts.

hi !

I notice that during a redirection to the login page the term in the displayed URL includes the terms “login/?redirect_to=”
How to purify the browser URL?
Ps: I use force login with Theme my login and Wp hide login

Other point
When you try to access a page that does not exist (in non-connected mode), the site loops (too many redirects) instead of displaying the login screen. if the page is known it goes to the login page.
curious behavior? Have you noticed this and how can I correct the problem by coding?

Thanks a lot
Thomas

I tried several Bypass methods and can get the request page etc working, but when the user gets the reset email and clicks the link, they get:

{“code”:”rest_unauthorized”,”message”:”Only authenticated users can access the REST API.”,”data”:{“status”:401}}

url trying to bypass is:

https://mysite/wp-json/wp-mail-smtp/v1/e/BIGOLSTRINGForUser

I love the simplicity of the plugin.

However, I never had this problem previously, but as of lately when I close the tab and access the site again later on, the full site is visible. It used to logout and require login each time the tab for the site was closed. Now I have to manually log out.

I’ve been using your wonderful plugin on a batch of sites for many years. Thanks for making it available!

I have trouble with it in a site with a Staging/Production environment setup. I want to use it to force login in the staging site, but not the production site. That requires remembering to activate and deactivate it every time we copy up or down. (And my memory is not that good!)

I’m wondering if I could use the my_forcelogin_bypass function, or a similar one, to exempt all pages in the domain of the live production website but not the domain of the staging site. Or vice-versa, use a hook to work only on pages in the staging domain (which might have less of a performance penalty on the live site, if you think that’s an issue.)

That way I could leave it activated all the time and not worry about it.

Any suggestion of code I could use would be greatly appreciated!!

We came across issue with bricks builder custom login pages, we get redirect loop when custom login page is defined.

hi can i unlook the register page ? … thanks a lot for your work ??

Hi there, I am having the same problem. I keep getting this error “Error occurred: Message = {“code”:”rest_unauthorized”,”message”:”Only authenticated users can access the REST API.”,”data”:{“status”:401}} | Status = 401″ when trying to send an incoming webhook.

I have proved your plugin to be the culprit since once I deactivate it, webhook works. This is bc your plugin blocks rest api calls without authentication. I have already tried adding the code you shared at the end of this thread https://www.ads-software.com/support/topic/bypassing-only-specific-rest-endpoint/ as such:

function my_forcelogin_bypass_rest_api( $result ) {

// Skip if request is authenticated
if (!empty($result)) {
    return $result;
}

if ($_SERVER['xtremeplatform.com'] == '/wp-json/uap/v2/uap-16589-16590') {
    return true;
}

return $result;
}
add_filter( 'rest_authentication_errors', 'my_forcelogin_bypass_rest_api', 20 );

This however is not working and same 401 error remains. Please let me know how to properly add this exception AND how to add more than 1 exception URLs. Thank you.

When I go to any page on the site I am redirected to login… this is correct. But if I click on any other page on the site, it is redirecting back to the login screen each time. I have even shown something on the home if a user is logged in so I know that wordpress sees me as logged in at least at that moment.

When Forced Login is enabled using permialink set to Plain users are able to use the lost password link. When we enable

Post name

https://amwellportal.wpengine.com/sample-post/

When using Post Name or %post-name%, users are then able to log out but can no longer use the reset password link. Any ideas?

• This topic was modified 1 year ago by benzorollz.

hi to everyone i must disable on registration and lost password pages… i can ? thanks..

Hi,

I use Force Login and I have bypassed several pages without any trouble. I display an embbed PDF (thanks to the PDF Embedder plugin) on these bypassed pages. The problem is that the PDF embbed is locked by Force Login. Instead of being displayed, it is replaced by the login form.

My question is: How can I tell Force login plugin to display this embbed PDF?

The URL of this PDF is like: “/wp-content/uploads/securepdfs/2023/07/name-of-the-file.pdf”

I am sure that the URL of the page is correctly bypassed, because all the page content is displayed, except the PDF.

Thank you very much for your plugin and for your help.

• This topic was modified 1 year, 1 month ago by barracuda1970.

Have been trying for a few days now. If anyone can help it would be amazing. Firstly the Force Login plugin is fab. It does exactly what it says. My issue is I want heaven and earth and I don’t have the skills. I want to use it to login to a new login form, say called new_login. Also I wish to have one exception, the landing page which would have a link to the login page. That page is straight forward.
This is the starting code I have, but I don’t know how to modify it. Just know it is appended to the functions file.

// Custom Login URL function my_login_page( $login_url, $redirect ) { return site_url( ‘/custom-login/?redirect_to=’ . $redirect ); } add_filter( ‘login_url’, ‘my_login_page’, 10, 2 );

If anyone could help? thank you

Paul

hi guys….I put in the bypass code on my theme function.php page to bypass a url and allow visitor access.

I land on it with a string query to auto-fill a gravityform. It was working perfectly until maybe 2 weeks ago but now forcelogin will not allow visitors and forces a login

any ideas?

Hello,
How can I change the image displayed above the login details on the “Force Login” screen.

Many thanks

Hello everyone,

I don’t know if it is related to my WordPress instance only but when I try to reach a page that does not exists with this plugin enabled (by using a url with a random slug), I have a “too many redirects” error.

But if I disable the force plugin (or if I let it enabled while I’m already logged in), the WordPress default redirection to 404 default page is working well.

Then, I tried to manage access to the 404 page by adding the snippet code to bypass force plugin in theme/functions.php (trying to set $bypass = true; when is_page('404')) but it didn’t work.

Any suggestion on how to manage this ?

Thank you !

Hi there, I really love the simplicity and usefulness of this plugin. Thanks for all your generosity!

I’d love to provide like a “Secret URL” that would allow friends/clients to see the whole website – bypassing the force login completely when they use a specific url parameter, or even maybe a secret url.

1. example.com?bypass=friendsonly
2. example.com/bypass-totally-secure-url-2456

I’m kind of assuming this would require storing a session cookie or something to that effect. Thanks again!

Hello,
I installed the plugin for 1 year it works great thank you. But for a few days it’s impossible to create user accounts with REST API user. Could the plugin be the cause ? Thanks

We use your plugin to restrict access to only logged in users. We also use The Events Calendar plugin.

When a logged out user goes to the /events page, that The Events Calendar generates, they just get a blank white page. When landing on any other page, the plugin works fine and redirects to the login page, then redirects to the page the user was trying to access once they are logged in.

No errors are being generated. Nothing in the network tab or when WP_DEBUG is enabled. This bug persistes even with just the Force Login and The Events Calendar plugins active and with the default theme. I talked to our host and the issue isn’t coming from the server either. So it must be some conflict between the two plugins.

Any ideas on how to resolve this?

Thank you.

I use this plug-in with my staging sites or sites in development and I love it.
I have a new request to require a password or login to view a single page. Can Force Login protect a single page? I dont need any user functionality, just password protection for a single page.

Good day,

I have a single site which use multiple domain, take note this is not a multi site.

I’m using this wpconfig to bypass the domain site
define(‘WP_SITEURL’, ….);
define(‘WP_HOME’, ….);

The problem is forcelogin plugin redirect the URL to the original one (if I disable the plugin it works ok), question how can I bypass this and use the domain URL and not the original domain URL?

thanks & regards,

We have used this plugin to create a password protected area of the site that users have to register to access. However we aren’t seeing visits to these pages in our analytics. It looks like all of the pages behind the plugin are set to Noindex.

How do we change them to be indexable?

• This topic was modified 1 year, 7 months ago by kakadukayleigh.

Hi there,

A client of mine is having real issues tracking the customer journey via Google Analytics behind the log in.

Is this possible? If so what is recommended?

Thanks in advance!

How do I add an exception for author archives so anyone can see author page

I need to allow a bypass page to by bypassed even when a variable URL parameter exists in the URL string.

For instance I have this code:

 // Allow all single posts
  if ( is_single() ) {
    $bypass = true;
  }

  // Allow these absolute URLs
  $allowed = array(
    home_url( '/my-account/' ),
    home_url( '/commissary-login/' ),
    home_url( '/storehouse-registration-page/' ),      );
  if ( ! $bypass ) {
    $bypass = in_array( $visited_url, $allowed );
  }

  return $bypass;
}
add_filter( 'v_forcelogin_bypass', 'my_forcelogin_bypass', 10, 2 );


/** 
* Sets Custom Registration and Login Page  
*/ 
add_filter( 'register_url', 'custom_register_url' );
function custom_register_url( $register_url )
{
    $register_url = home_url( '/storehouse-registration-page/' );
    return $register_url;
}

It allows access to my custom registration page when accessed directly. Such as: https://domain.com/storehouse-registration-page/

However, I need it also to allow access if a URL parameter is being used such as a UTM code or other parameters that are needed for the registration form to capture in a hidden field. Such as:

https://domain.com/storehouse-registration-page/?registration-source=Google
or
https://domain.com/storehouse-registration-page/?registration-source=Facebook

Hi there, I’ve installed your plugin and it works, but only after displaying the home page: once a link is clicked, the user is prompted to log in. Shouldn’t it display the login prompt before displaying the homepage?

Sorry if I’ve missed something obvious.