These past months have been filled with security reports, articles and 0-day exploits. It’s fair to say they had little to do with WordPress, but that’s besides the point. What’s certain is that we’re now living in an increasingly technologically complex world and it’s getting harder and harder to keep everything safe and secure.
Username + passwords will probably not be replaced anytime soon. But that doesn’t mean we can’t come up with alternatives.
Everybody has a “friend” that uses the same password or some variation: the pass with numbers in it, the pass with capital letters, the pass with special characters in it, the pass with the year at the end in it, etc.
Lately there have been great solutions involving one time passwords like Persona from Mozilla. Whenever a user wants to log in, they receive a short-lived, one-time link with a token via email or text message.
There is also Clef that uses a QR code and also supports WordPress via a plugin
But all these are third party so let’s look into building something native to WordPress.
The language barrier that is. I’m sure many of you have tried to translate a WordPress plugin, some even Profile Builder or WordPress Creation Kit, just to find out at the end of the process that it was a difficult thing to do. I’m sure many of you wanted to help out with a translation and did not have the know-how in achieving this.
Moreover, as new updates from these plugins rolled out, the management of the translations would get out of control and the end result would be an incomplete translation that would make the plugins inconsistent.
At this point I’m asking. Wouldn’t it be nice to have a place where translations are accesible, easy to mantain and always up to date with the latest version of the plugins? Well, starting today, for Profile Builder and WordPress Creation Kit there is such a place and it is called CozmosLabs Translate.
Translate is a new tool, powered by GlotPress, that is designed as a collaborative work environment where anyone can help with the translations. It has a simple and easy to use interface, where you can edit translations and view their progress.
As certain languages get fully translated, or are close to that point, they will be added in plugin updates, but if you feel confortable using some languages before their official release you can download them in advance.
a completely redesigned interface, more focused on flexibility
manage default user profile fields (add/edit/delete)
drag & drop to reorder profile fields
set a minimum password length
enforce minimum password strength (using the built in WordPress strength meter)
email confirmation for new users
allow users to login with email or username
New to Profile Builder?
If you’re looking to have a basic front-end registration for your website, you’ll find Profile Builder Free very easy to set up. It’s shortcode based, allowing you to set up register, login and edit profile forms in minutes.
More functionality (like Extra User Fields (Avatar Upload), Front-end User Listings, Custom Redirects or Multiple Registration Forms) is available in the premium versions.
I’m quite concerned for the security of my site and content if I allow users to sign up with weak passwords.
That’s something we hear a lot from website owners. Chances are, if you run a WordPress membership site that allows user registration, your primary security concern is NOT to allow users to sign-up with weak passwords.
A short or weak password is one of the most used security breach by people trying to hack your site, so you try to avoid that at all costs. Cracking one password may sometimes be enough to lose access to sections or even the whole website, which puts your content, revenue and work in danger.
After hours of research you’ve probably realized that most of the plugins available go only half way. While some offer increased security by allowing you to set a minimum password length, they do NOT posses all the features you would need from a user registration plugin.
On the other side, even though there is a significant list of plugins out there that can help you with some aspects of the user registration part, the big majority fall short when it comes to security.
Wouldn’t it be nice to have an all in one solution that can help you with both the front-end user registration part, but also be able to set security restrictions when it comes to registration forms?
I’ve set 2 new roles for my site – “sellers” and “buyers”. Each role should have its own registration page with different fields.
I’ve searched for hours for a plugin that will give me the option to do this, but couldn’t find one. Does a plugin like this even exist?
This sounds like a pretty common configuration in membership websites with different role registrations. However, finding a user registration plugin that does this out of the box is where things get hard.
Plugins authors try to offer you workarounds, but the truth is you shouldn’t be required to mess around with the code trying to filter the fields that aren’t relevant on a specific form. Nor be advised to use CSS to hide fields, which of course can break stuff if you need some kind of validation for the extra fields.
Shouldn’t multiple user registration forms with different profile fields for certain roles be more easy to set up using a plugin that was designed exactly for this, to handle the front-end user registration part?
That’s the main reason we made sure that this process is really straight forward in Profile Builder 2.0.
Profile Builder is about to get even better. The past couple of months we’ve been working hard to improve and extend its functionality.
Most of the architecture and UI of the plugin has been rebuilt from scratch for increased usability, focusing on the most essential tasks you would need from an all in one user registration and management plugin.
Since the official release is approaching soon, we thought we’d give you a sneak peak at some of the new things in Profile Builder 2.0.
has_term checks if the current post has any of given terms. The first parameter can be an empty string. It expects a taxonomy slug/name as a second parameter and you can also pass a post ID or object as the third parameter.
It can be useful if you need to list a different message or apply a different css class to your post.
However, if you want to use this inside your content, it won’t work simply because you don’t run PHP code inside the WordPress content area.
This is where a simple shortcode can come a long way.
It’s a simple mapping of the has_term conditional tag to the [has-term] shortcode.
It gives you access to:
[has-term term=”term-name” taxonomy=”tax-name” value=”true” id=””]
List this if post has term-name
[has-term term=”term-name” taxonomy=”tax-name” value=”false” id=””]
List this if post doesn’t have term-name
Plugin Name: WCK - Conditional Shortcode Based on has_term
Plugin URI: http://www.cozmoslabs.com
Description: Gives you access to the [has-term term="term-name" taxonomy="tax-name" value="true" id=""] List this if post has term-name [/has-term] AND [has-term term="term-name" taxonomy="tax-name" value="false" id=""] List this if post doesn't have term-name [/has-term]
Author: Cristian Antohe
Author URI: http://www.cozmoslabs.com
Currently there is no support for multiple term names to be passed inside term=”term-name” (similar to the actual has_term function), although that should be easy enough to implement in the plugin if you want to.
Due to an overconfidence on our part regarding WordPress updates and compatibility issues with our plugins, we failed to test WordPress Creation Kit 2.0.5 with WordPress 3.9 before the official launch of WordPress 3.9.
We are sorry. We should have known better and we will make a habit out of testing our plugins with future versions of WordPress before they are released.
Also, due to the way WordPress loads TinyMCE v.4, we’re not able to use it any longer for our own WYSIWYG editor (the main reasons it took us a full day to issue the update). That is the reason why from version WCK 2.0.6 we’ve switched to CKEditor for the WCK WYSIWYG editor.
You can download the latest version of WordPress Creation Kit from: