phibertek

Cancel. I found where this database update takes place.

-Phibertek

I’m trying to bypass the login feature of WordPress and making it automatic. Once a user is logged into another application, it logs them into WP without being challenged. Unfortunately, the password that I am passing is already encrypted md5(). So, I want to change wp-login.php to disable encrypting it again, rather just compare the hashed strings.

-Phibertek

What I don’t understand is how is this a trigger for wp_login in pluggable.php. A little further down in the code (wp-login.php)it actually calls wp_login directly. Can you help me understand this? I would like to pass WP an already encrypted string.

do_action(‘wp_authenticate’, array(&$user_login, &$user_pass));
….
….
….

if ( wp_login($user_login, $user_pass, $using_cookie) ) {
if ( !$using_cookie )
wp_setcookie($user_login, $user_pass, false, ”, ”, $rememberme);
do_action(‘wp_login’, $user_login);
wp_redirect($redirect_to);
exit;
} else {
if ( $using_cookie )
$error = __(‘Your session has expired.’);
}
}

-Phibertek