Bypass

Hi– thanks for using Force Login!

First, I want to address your sample code. It looks like you’re not passing the expected second parameter from the filter to your my_forcelogin_bypass() function. Let’s clean up that code to be like this:

/**
 * Bypass Force Login to allow for exceptions.
 *
 * @param bool $bypass Whether to disable Force Login. Default false.
 * @param string $visited_url The visited URL.
 * @return bool
 */
function my_forcelogin_bypass( $bypass, $visited_url ) {
  // Allow these absolute URLs
  $allowed = array(
    home_url( '/lostpassword/' ),
    home_url( '/resetpass/' ),
    home_url( '/resetpass/?' . $_SERVER['QUERY_STRING'] ),
  );
  if ( ! $bypass ) {
    $bypass = in_array( $visited_url, $allowed );
  }

  return $bypass;
}
add_filter( 'v_forcelogin_bypass', 'my_forcelogin_bypass', 10, 2 );

If those TML action URLs (slugs) are actual WP pages, you might be able to use this logic instead of the absolute URL example above.

if ( is_page( array( 'lostpassword', 'resetpass' ) ) ) {
  $bypass = true;
}

Second, there is likely a more elegant solution to determine how/when to bypass Force Login using functions from the Theme My Login plugin. For example, this untested code:

/**
 * Bypass Force Login to allow for exceptions.
 *
 * @param bool $bypass Whether to disable Force Login. Default false.
 * @param string $visited_url The visited URL.
 * @return bool
 */
function my_forcelogin_bypass( $bypass ) {
  // Allow TML action pages
  if ( function_exists('tml_is_action') ) {
    $bypass = tml_is_action();
  }
  return $bypass;
}
add_filter( 'v_forcelogin_bypass', 'my_forcelogin_bypass', 10 );

Or– try writing a conditional statement using their tml_get_action_url( $action ) function.

Good luck!