Problem integrating SMF Login Check into Wordpress!!!!

[wushdishmeen]

That I can't do unfortunately.  I wish I could but the site is pretty big and security issues are the biggest concern which is exactly why fixing this issue is so important.   It keeps non-members out of a portion of my site that has been accessible to outsiders due to the coding clashing somewhere.   I spent 8 months trying to figure out what was clashing and I couldn't.  The way my site is setup is that it's a network of websites with multiple scripts installed such as SMF, wordpress, clipbuckets, etc; and I use the SMF forum as the login session for the entire site.   So if a user is not a member of my SMF forum and not logged into it they cannot access any of the other subdomains on my site since I have the SMF login check integrated into all of them with the is_not_guest function from SSI.php.  It works perfectly everywhere else and used to work in wordpress until an update happened.

Also the area of my site I'm working on is visited by 1000 unique visitors a day so when something goes wrong I have to immediately change it back as to not disturb user access.   If it was just some crappy site nobody cared about I wouldn't mind giving limited FTP access.

Plus I rather not just let someone do it and not see the process and learn nothing.   I would like to see how it's being fixed.   You're not missing anything by not having access other than a few seconds of time for me to respond and tell you what's happening.   It would be the same through trial and error as I can assure you I'm doing exactly what you're saying to do.  My word press files are practically stock PHP and I haven't ever touched the SSI.php nor the smf_2_api.php files other than what you told me to change.   So you have access to the same files I'm using.

The only alternative to this problem is to find a user bridge that actually works.   Something that will import all of my current SMF users into wordpress user database and then will upkeep any new SMF members and add them to wordpress either automatically or by a manual update.  None of the bridge plugins I've found have worked so far.

[SlammedDime]

Have you tried this: http://custom.simplemachines.org/mods/index.php?mod=3008

[wushdishmeen]

Is that your plugin?  I actually responded to your thread on here because I have SMF 2.0 RC3 and the plugin wont work.  I tried using the emulation mode to emulate RC5 and it gave me errors.   If you could get that to work with SMF 2.0 RC3 that would be extremely helpful.

The reason I can't upgrade to SMF 2.0 RC5 yet is because some really important addons that I use aren't compatible with any version above RC3 at the moment.

Here is a link to my post and the error I had http://www.simplemachines.org/community/index.php?topic=434738.msg3088232#msg3088232

[SlammedDime]

Ah yes, I remember... there is no way to make it rc3- compatible... but SMF 2.0 Final is out now... I would strongly suggest looking into the addons you're having compatibility issues with to see if they've either been updated, or you can emulate a lower SMF version to make them work on final.

[wushdishmeen]

That's a good idea.  But does your plugin work with SMF 2.0 or just RC5?  I did actually check to see if newer versions were out and they weren't at the time but I see that some of them have been updated in the past few days so I'll have to definitely check that out.

Does the plugin integrate existing users from SMF into wordpress?   I can't start from scratch as I have over 11,000 registered users already.   Also,  my SMF forum is in a totally different folder than my wordpress blog.   SMF is in public_html/forum and the wordpress is in public_html/blog

Any issues with that?  I know a lot of the previous plugins did.

[SlammedDime]

If a user exists in either SMF or Wordpress, but not the other, they will be created in the other automatically upon login. (and yes, it should work with SMF 2.0 final, as it makes no code changes to SMF, and the integration hooks did not change between those releases.

[wushdishmeen]

Does your plugin work with 3.2.1?  I am currently using Wordpress 3.1.3 and haven't updated yet.

[Kindred]

you really need to upgrade both your smf and wordpress installations, especially ifsecurity is as big a concern as you say....

[wushdishmeen]

I'm updating my SMF to 2.0 at the moment and I upgraded my WP to 3.2.1

[wushdishmeen]

Your bridge plugin doesn't seem to work.  I upgraded to SMF 2.0 and WP 3.2.1 and then installed your plugin by emulating RC5 and when I logged out of my wordpress it said something like "your login session is missing the SALT codes" and made me go to some site that reads out a bunch of codes and tells me to add it to my wp-config.php file.   So I copied them and replaced the existing codes in my wp-config.php and visiting my blog creates the same exact issue I had with the other crap.

It just keeps redirecting me to the SMF login and whether I'm logged into SMF or not.

One thing that does seem to work is that when people login to SMF it seems to create the account on the wordpress.  Which is a GOOD START.   However,  I have to de-activate the "redirect wp-login.php to SMF" option otherwise I get the infamous endless login loop.   So I can at least have the users be transferred and then use my "Members only" plugin on my wordpress to keep out people who aren't an SMF member.

The only issue I notice is that when I log out of the SMF forum I am not logged out of wordpress.

[SlammedDime]

Are you using subdomains between SMF and/or Wordpress?  If so, that could be why it might not be working quite right, as there is an issue with subdomains at the moment.

[wushdishmeen]

Yea I am.  Like I said that seems to always be the issue with these plugins.   Not many people keep SMF and Wordpress in the same folder so if you could get that to work that would be great.

Also,  I am noticing that it takes awhile for the wordpress to create the account after the user logs in to SMF.   They've been having to clear their cookies just for it to start working and sometimes it takes multiple SMF logins for it to transfer.

But all in all it is a good temporary fix for my issue and is keeping non-members out.  Only issue is that actual members are having trouble getting in every so often.   But they eventually get in after a few tries.

Thanks

[SlammedDime]

The account creation is instant into the Wordpress database, it's a direct database insert from SMF (however if they don't exist in one of the systems, they will get a prompt that password security has been upgraded and they need to log in again so that the plaintext password is sent to SMF, instead of SMF's hashed version).

[wushdishmeen]

Yea I saw that. Currently I am not allowing registration in either wordpress or SMF.   So I am only using this to transfer my existing SMF users over to the wordpress.  So I'm telling all of my members to log out of SMF and log back in so an account gets created on the wordpress.   It's been working for most of my members but some of them are having trouble getting an account to appear on the wordpress blog after logging into SMF.

Most of the users having trouble seem to be using Internet Explorer instead of FireFox.   Could browser choice be involved in the issues?

When you log into SMF does your password get transferred to the wordpress account as well or is it only the username and email and you have to reset your pw on the wordpress just to get in?

[SlammedDime]

When they log into SMF, and they don't yet exist in WP, SMF will ask them to log in again, so that a plaintext password is sent back to SMF.  The mod then takes that password and creates a WP styled password and inserts it into the WP database so they can log into WP using that password.

[wushdishmeen]

Some people are having trouble though.   They logged out of my SMF forum,  got the prompt about security,  then typed their username and password and logged back into SMF.  Then they went to my wordpress and their username existed but the SMF password was not working.   SO then they had to use the "password reset" on my wordpress just to get their password to work.

It seems it's not transfering the password correctly for some people.   But 1000 people got in successfully with no issue...  it's only about 20-30 people who seem to have to reset their password.

1-2 people it didn't even create a wordpress account for them at all until after 10-15 attempts.