stikekar

There is one issue that has come up now. When a user logs into WordPress using the external database and then changes their password in the external database, that user can still login to the WordPress with the old password until the user logs into WordPress using the new password.

Tom,

Upon further investigation, we were able to identify the problem in our external DB. The plugin works perfectly. Thanks for your time and a beer or two are on the way. Are you planning updates to the plugin ?

Just to confirm the modifications you requested were done correctly by me.

while( $userData = sqlsrv_fetch_array($stmt)) {
error_log(‘EXLOG———————–>>>> START’);
$user_specific_salt = false;

if (exlog_get_option(‘external_login_option_db_salting_method’) == ‘all’) {
$user_specific_salt = $userData[$db_data[“dbstructure_salt”]];
}

error_log(‘EXLOG———————–>>>> 1’);
error_log(var_export($userData, true));
$valid_credentials = exlog_validate_password($password, $userData[$db_data[“dbstructure_password”]], $user_specific_salt);

error_log(‘EXLOG———————–>>>> 2’);
error_log(var_export($valid_credentials, true));
if ($valid_credentials) {
$wp_user_data = exlog_build_wp_user_data($db_data, $userData);
$wp_user_data[“exlog_authenticated”] = true;
return $wp_user_data;
}
error_log(‘EXLOG———————–>>>> END’);
}

I will also check with my hosting company. Also, how can I send you a private note?

I have looked at the Apache Access log and Apache error log for the site. Both files are empty with no recorded activities. Log path for the site are
/var/log/virtualmin/members.e-ikon.com_access_log
/var/log/virtualmin/members.e-ikon.com_error_log

I added the additional lines and went through login/change password on external site/login(did not work). Where should I be looking for the log file. I have not seen one created.

Thanks for checking in with me. The external system is a MSSQL test database that we have created. Our plan is to present WordPress as a CMS. The changed password is going into the same column in the external database as before using our URL and is not updating the WordPress user password. If I login the user in WordPress using the old password, the user is able to login. We have also tested that the user is able to login into the external system using the new password.