Login security

Hi Pat,

Thanks for the appreciation ??
We can customize the plugin to meet your needs. Would you send us detailed specifications at support[at]heateor[dot]com?

WordPress has written the specification for user authentication. Currently Socializer does not seem to be following that specification as it does not check if the user account has been activated. If you follow the WordPress spec I think you will find all that is needed for proper authentication.

Thanks Pat…

WordPress has written the specification for user authentication. Currently Socializer does not seem to be following that specification as it does not check if the user account has been activated. If you follow the WordPress spec I think you will find all that is needed for proper authentication.

Okay, we will improve this in next release. You can still contact us via email, if you have any other requirements.

I am still hoping for a solution that will check if a user account is active on the site.

If a user account is deactivated in the backend, the user should not be able to login. SS does not check if the account is active/inactive. Please suggest the proper placement in the SS plugin to make the check.

Thank you for a great plugin!
Pat…

Hi Pat,

As WordPress doesn’t provide any functionality to set user account active/inactive, there isn’t anything mentioned for this in official WP documentation.
However, our plugin checks for error while creating a user, using is_wp_error function.
You can use following code to check if user account is active:

/**
 * Check before login if user account is active
 */
function user_status_check( $user, $userLogin, $password ) {
	if ( $YOUR_CONDITION_MEETS ) {
		$user = null;
	}
	return $user;
}
add_filter( 'authenticate', 'user_status_check', 10, 3 );

You can place it in functions.php file of your theme/child theme.