WordPress验证码登录/注册，注册直接使用密码注册。

WordPress默认的用户注册为了安全考虑用的是邮件发送密码的形式进行注册，会很麻烦，但是完全取消就不安全，所以一点优化在这边给网站登录和注册都加上了验证码。

WordPress验证码登录和密码直接注册目录

WordPress验证码登录

WordPress验证码注册

WordPress密码注册

WordPress验证码登录

先给后台加上随机的验证码相加获得答案的方式。

//后台登陆数学验证码，代码由悦然wordpress建站收集自网络
function rhymo_add_login_fields() {
//获取两个随机数, 范围0~9
$num1=rand(0,9);
$num2=rand(0,9);
//最终网页中的具体内容
echo "<p><label for='math' class='small'>验证码</label><br /> <input type='text' name='sum' placeholder='$num1 + $num2 = ?' class='input' value='' size='25' tabindex='4'>"
."<input type='hidden' name='num1' value='$num1'>"
."<input type='hidden' name='num2' value='$num2'></p>";
}
add_action('login_form','rhymo_add_login_fields');

然后给验证码答案写个判断，然后加个钩子

function login_val() {
$sum = 0;
if(isset($_POST['sum'])){
$sum = $_POST['sum'];//用户提交的计算结果

switch($sum){
//得到正确的计算结果则直接跳出
case $_POST['num1']+$_POST['num2']:break;
//未填写结果时的错误讯息
case null:wp_die('错误: 请输入验证码.');break;
//计算错误时的错误讯息
default:wp_die('错误: 验证码错误,请重试.');
}}
}
add_action('login_form_login','login_val');

WordPress验证码注册

同样的要加两个随机值

//WordPress 新用户注册随机数学验证码
function add_security_question_fields() {
//获取两个随机数, 范围 0~9
$num1=rand(0,9);
$num2=rand(0,9);
//最终网页中的具体内容
echo "<p><label for='math' class='small'>验证码：$num1 + $num2 = ? </label><input type='text' name='sum' class='input' value='' size='25'>"
."<input type='hidden' name='num1' value='$num1'>"
."<input type='hidden' name='num2' value='$num2'></p>";}

add_action('register_form','add_security_question_fields');

然后写个判断

add_action( 'register_post', 'add_security_question_validate', 10, 3 );

function add_security_question_validate( $sanitized_user_login, $user_email, $errors) {
$sum=$_POST['sum'];//用户提交的计算结果
switch($sum){
//得到正确的计算结果则直接跳出
case $_POST['num1']+$_POST['num2']:break;
//未填写结果时的错误讯息
case null:wp_die('错误：请输入验证码！');break;
//计算错误时的错误讯息
default:wp_die('错误：验证码错误,请重试！');}}
add_action( 'add_security_question','register_form' );

这样验证码注册登录就完成了。

WordPress密码注册

// 添加输入密码表单
add_action( 'register_form', function () { ?>
<div class="user-pass1-wrap">
<p>
<label for="pass1"><?php _e( 'Password' ); ?></label>
</p>

<div class="wp-pwd">
<input type="password" data-reveal="1" data-pw="<?php echo esc_attr( wp_generate_password( 16 ) ); ?>" name="pass1" id="pass1" class="input password-input" size="24" value="" autocomplete="off" aria-describedby="pass-strength-result" />
<button type="button" class="button button-secondary wp-hide-pw hide-if-no-js" data-toggle="0" aria-label="<?php esc_attr_e( 'Hide password' ); ?>">
<span class="dashicons dashicons-hidden" aria-hidden="true"></span>
</button>
<div id="pass-strength-result" class="hide-if-no-js" aria-live="polite"><?php _e( 'Strength indicator' ); ?></div>
</div>
<div class="pw-weak">
<input type="checkbox" name="pw_weak" id="pw-weak" class="pw-checkbox" />
<label for="pw-weak"><?php _e( 'Confirm use of weak password' ); ?></label>
</div>
</div>
<p class="user-pass2-wrap">
<label for="pass2"><?php _e( 'Confirm new password' ); ?></label>
<input type="password" name="pass2" id="pass2" class="input" size="20" value="" autocomplete="off" />
</p>
<p class="description indicator-hint"><?php echo wp_get_password_hint(); ?></p>
<?php
});

// 加载验证JS
add_action( 'login_enqueue_scripts', function () {
if ( is_on_registration_page() && !wp_script_is( 'user-profile' ) ) {
wp_enqueue_script('user-profile');
}
});

// 验证
function is_on_registration_page() {
return $GLOBALS['pagenow'] == 'wp-login.php' && isset( $_REQUEST['action'] ) && $_REQUEST['action'] == 'register';
}

// 错误提示
add_filter( 'registration_errors', function ( $errors ) {
if ( empty( $_POST['pass1'] ) ) {
$errors->add( 'password-required', '<strong>Error</strong>: Please enter a password.' );
}

if ( empty( $_POST['pass2'] ) ) {
$errors->add( 'password-required', '<strong>Error</strong>: Please enter a password confirmation.' );
}

return $errors;
});


// 生成随机密码
add_filter( 'random_password', function ( $password ) {
if ( is_on_registration_page() && ! empty( $_POST['pass1'] ) ) {
$password = $_POST['pass1'];
}

return $password;
});

// 自定义邮件内容
add_filter( 'wp_new_user_notification_email', function ( $wp_new_user_notification_email, $user ) {
$message = sprintf( __( 'Username: %s' ), $user->user_login ) . "\r\n\r\n";
$message .= __( 'Password: As entered during your registration' ) . "\r\n\r\n";
$message .= wp_login_url() . "\r\n";

$wp_new_user_notification_email['message'] = $message;

return $wp_new_user_notification_email;
}, 10, 2 );