tbenyon

Hey @philengel,

1) That is not an error from this plugin. It looks like you may also be using Custom WP Login?

Try deactivating that plugin and see if you still get the error.

2) Yes – it is normal to only see part of the e-mail. I truncate the strings when displaying it to the end user.

Let me know how you get on with disabling the other plugin and trying it again.

Thanks,

Tom

Hey @colmanbyrne,

The statement you have sent is a custom hashing solution and thus not supported by the plugin as a standard setting.

This is because as well as using the crypt hashing method, it is also relying on an md5 hash.

For this reason the only way for you to solve this is by using the “exlog_hook_filter_authenticate_hash” hook. You can find documentation for its use in the FAQ.

To help you out however, this is something like what you would want to add to your functions.php file:

function myExlogHashAuthenticator($password, $hashFromDatabase, $username, $externalUserData) {
    $pw_salt = 'someSaltUsedOnExternalDatabase'
    $generatedHashFromEnteredPassword = crypt(md5($password), $pw_salt)
    return $generatedHashFromEnteredPassword == $hashFromDatabase;
}
add_filter('exlog_hook_filter_authenticate_hash', 'myExlogHashAuthenticator', 10, 4);

I have not tested this so treat this like pseudo code to help you build a solution.

I should also point out that the hashing system your external database is using is not best practice. I would recommend reading the SECURITY NOTES -> Hashing section of the main plugin page for guidance on why this is not desirable.

Let me know if you have any questions, and let me know how you get on,

Thanks,

Tom 🙂

• This reply was modified 6 years, 5 months ago by tbenyon.

Regarding this 500 error. Can you tell me:

• What you click/press to make the error appear? The test button in the settings page?
• Do you get any other information with the error?
• Do any errors appear in your PHP error logs at the time you did this action?

Thanks,

Tom

No problem! I’ll mark this as resolved for now but if you have any issues with this just reply back here and we’ll have a further look together.

Thanks, and good luck with the project! 😊

Hey All,

Just letting you know that this feature is now complete and released in V1.8.4.

You can see some basic documentation here.

I will close this ticket for now, however if you have any questions or issues please get back in contact here 🙂

Thanks,

Tom

Hey @enduser670

I wanted to apologise for not getting back to your previous query fast enough but it’s great that you managed to resolve it yourself.

I was also really grateful for the detailed review you gave. It really does mean a lot so thank you 😊

Regarding this issue, there is a drop down that lets you specify the default role in the role mappings section. This is used for the exact scenario you are talking about. It lets you choose which role users should come in with if there are no custom mappings met.

Can you check that you haven’t got this drop down set to the administrator value for me.

Thanks,

Tom 😊

Hi @wburling1,

Apologies for the delayed reply.

The plugin does not block users from registering through WordPress.

This is something you can handle yourself and there’s a good article on how here however I haven’t tested it myself.

Regarding your second question, new user notifications is a standard WordPress feature and not something the plugin handles. I’m sure there is another plugin out there that can help you with this.

Regarding your third point about the error, thank you very much for bringing this to my attention. It will currently not cause any harm but means that the plugin logo will stop showing in the settings page in the future and I have to write another way of achieving this.

As this should be simple I’m hoping to get this out in the next release.

Thanks @wburling1 ,

Tom 🙂

Hi All,

Sincere apologies for taking so long to reply. Life’s been busy.

Thank you for the code @underdigital. The integration mentioned above is quite custom for each user.

Things that change for each user are:

how salt is handled (in your case salt is added to the beginning of the password)

the amount of iterations

length

To make this reusable I am going to add functionality to allow something like the custom function to be called from a plugin hook.

I am midway through developing this code already.

You as the user would need to add code similar to this to your functions.php file.

function myExlogHashAuthenticator($password, $hashFromDatabase, $username) {
    $iterations = 10000;
    $length = 40;
    $salt = $passwordSalt . $username;
        
    $hash = hash_pbkdf2("sha1", $password, $salt, $iterations, $length);
    $hash = \strtoupper($hash);
    return $hash == $hashFromDatabase;
}
add_filter('exlog_hook_filter_authenticate_hash', 'myExlogHashAuthenticator', 10, 2);

Let me know if any of you have any hesitations about this but my plan is to get this out as the next release.

Tom