WordPress:使用重写页面获取URL变量(登录页面)

Question

作为一个更大项目的一部分，我正在尝试在以下地址进行所有登录活动：

www.url.com/login

因此，可以在以下位置找到一个链接，该链接应该指向一个允许用户重置密码的表单：

www.url.com/login?action=lostpassword

然而，wp-login.php没有正确读取，当我转到上面的地址时，我会得到正常的登录表单。

我就是这样设置的：

add_action( 'init', 'add_virtual_page_template' );
function add_virtual_page_template()
{
    global $wp, $wp_rewrite;
    $wp->add_query_var( 'template' );
    add_rewrite_endpoint( 'login', EP_PERMALINK | EP_PAGES );
    add_rewrite_rule( 'login/?', 'index.php?template=login', 'top' );
    add_rewrite_rule( 'login/?', 'index.php?template=login', 'top' );
    $wp_rewrite->flush_rules();
}
add_action( 'template_redirect', 'add_virtual_page_redirect' );
function add_virtual_page_redirect()
{
    global $wp;
    $queryvar = get_query_var('template');
    if ($queryvar && $queryvar == 'login')
    {
        include(site_url('wp-login.php'));
        exit();
    }
    if ($queryvar == 'mylogin')
    {
        include( get_stylesheet_directory() . '/page-login.php' );
        exit();
    }
}

我错过了什么？

Answer 1

以下是我在构建WordPress for Web Apps工具包时如何处理这一问题(https://github.com/cferdinandi/web-app-starter-kit)：

// LOGIN FORM SHORTCODE
function wpwebapp_login() {
    // Get current page URL
    $url_current  = @( $_SERVER["HTTPS"] != 'on' ) ? 'http://'.$_SERVER["SERVER_NAME"] :  'https://'.$_SERVER["SERVER_NAME"];
    $url_current .= ( $_SERVER["SERVER_PORT"] !== 80 ) ? ":".$_SERVER["SERVER_PORT"] : "";
    $url_current .= $_SERVER["REQUEST_URI"];
    $url_clean = array_shift( explode('?', $url_current) );
    $login_failed = $url_clean . '?login=failed';
    $signup_success = $url_clean . '?signup=success';
    $reset_success = $url_clean . '?password-reset=success';
    // Variables
    $login_status = '';
    // If login failed
    if ( $url_current == $login_failed ) {
        $login_status = '<div class="alert alert-red">Invalid username or password. Please try again.</div>';
    }
    // If password reset
    if ( $url_current == $signup_success ) {
        $login_status = '<div class="alert alert-green"><strong>Success!</strong> We just sent you an email with your password.</div>';
    }
    // If password reset
    if ( $url_current == $reset_success ) {
        $login_status = '<div class="alert alert-green">Your password was successfully reset. We just emailed you a new one.</div>';
    }
    // The login form
    $form = 
        $login_status .
        '<form name="login" id="wp_login_form" action="' . get_option('home') . '/wp-login.php" method="post">
            <div>
                <label for="username">Username</label>
                <input type="text" name="log" id="log" value="" tabindex="1" autofocus>
            </div>
            <div>
                <label for="password">Password</label>
                <input type="password" name="pwd" id="pwd" value="" tabindex="2">
            </div>
            <div>
                <label>
                    <input name="rememberme" type="checkbox" id="rememberme" value="forever" tabindex="90" checked>
                    Remember Me
                </label>
            </div>
            <div>
                <button type="submit" name="wp-submit" id="wp-submit" tabindex="100" class="btn btn-blue">Log In</button><br>
                <a href="' . $url_clean . 'password-reset/">Forgot your password?</a>
                <input type="hidden" name="action" value="login">
                <input type="hidden" name="redirect_to" value="' . get_option('home') . '">
                <input type="hidden" name="testcookie" value="1">
            </div>
        </form>';
    // Display the form
    return $form;
}
add_shortcode( 'loginform', 'wpwebapp_login' );

// FAILED LOGIN REDIRECT
add_action('login_redirect', 'redirect_login', 10, 3);
function redirect_login($redirect_to, $url, $user) {
    // URL Variables
    $referrer = $_SERVER['HTTP_REFERER'];
    $url_clean = array_shift( explode('?', $referrer) );
    $login_failed = $url_clean . '?login=failed';
    // If the post submission is a valid page that's not the backend login screen
    if(!empty($referrer) && !strstr($referrer,'wp-login') && !strstr($referrer,'wp-admin')) {
        // If the password is empty...
        if($user->errors['empty_password']){
            wp_redirect($login_failed);
        }
        // If the username is empty...
        else if($user->errors['empty_username']){
            wp_redirect($login_failed);
        }
        // If the username is invalid...
        else if($user->errors['invalid_username']){
            wp_redirect($login_failed);
        }
        // If the password is incorrect...
        else if($user->errors['incorrect_password']){
            wp_redirect($login_failed);
        }
        // Catch all for all other issues
        else {
                wp_redirect(get_option('home'));
        }
        exit;
    }
    // Prevents page from hanging when redirected from backend
    if ( !empty($referrer) && ( strstr($referrer,'wp-login') || strstr($referrer,'wp-admin')) ) {
            wp_redirect(get_option('home'));
            exit;
    }
}

// BLOCK BACKEND ACCESS FOR NON-ADMINS
add_action( 'init', 'blockusers_init' );
function blockusers_init() {
    // If accessing the admin panel and not an admin
    if ( is_admin() && !current_user_can('level_10') ) {
        // Redirect to the homepage
        wp_redirect( home_url() );
        exit;
    }
}

有了这个设置，你就可以阻止用户重定向到后端（不幸的副作用是：如果你没有登录，你需要先从前端登录）。您可以根据情况等添加自定义错误消息。只需使用[loginform]快捷代码即可将其添加到页面中。

WordPress for Web Apps工具包具有这样的功能，可以重置密码、注册表单等，所以你可能想看看它。去年，我在一个项目中也经历了同样的学习过程。