Change WP User Password

### Option 1: Use `wp_set_password()`
This method directly updates the password and logs the user out.

<?php
function change_user_password($user_id, $new_password) {
    wp_set_password($new_password, $user_id);
    echo "Password for user ID {$user_id} has been updated.";
}

// Example usage:
change_user_password(1, 'NewSecurePassword123');

### Option 2: Use `wp_update_user()`
This method updates the user's password without logging them out.

<?php
function update_user_password($user_id, $new_password) {
    $user_data = [
        'ID' => $user_id,
        'user_pass' => $new_password,
    ];

    $result = wp_update_user($user_data);

    if (is_wp_error($result)) {
        echo "Error updating password: " . $result->get_error_message();
    } else {
        echo "Password for user ID {$user_id} has been updated.";
    }
}

// Example usage:
update_user_password(1, 'NewSecurePassword123');

### Option 3: Use Raw Database Query
This method involves directly updating the database. Use it with caution.

<?php
global $wpdb;

function raw_update_user_password($user_id, $new_password) {
    global $wpdb;

    $password_hash = wp_hash_password($new_password);
    $wpdb->update(
        $wpdb->users,
        ['user_pass' => $password_hash],
        ['ID' => $user_id],
        ['%s'],
        ['%d']
    );

    echo "Password for user ID {$user_id} has been updated.";
}

// Example usage:
raw_update_user_password(1, 'NewSecurePassword123');

### Notes:
– Always sanitize user input to prevent security vulnerabilities.
– Replace `1` with the appropriate user ID.
– Use a strong password and store it securely if handled dynamically.
– For plugin or theme development, you can hook into actions like `init` to execute these functions.

—

### 1. **Verify User Role and Capabilities**
Check if the user has the correct role (`administrator`) and capabilities.

**Steps:**
– Ensure the `wp_staging_capabilities` meta key includes `"administrator": true`.
– Verify that the `wp_staging_user_level` is `10` (default for administrators).

If using the default `capabilities` key (not `wp_staging_capabilities`), ensure it exists and has similar data.

**Code to Check:**

$user = get_user_by('ID', 1); // Replace 1 with the user ID.
if ($user) {
    $capabilities = get_user_meta($user->ID, 'wp_staging_capabilities', true);
    echo '<pre>';
    print_r($capabilities);
    echo '</pre>';
}

**Fix:**
If missing or incorrect, set the proper role and capabilities:

$user = get_user_by('ID', 1); // Replace 1 with the user ID.
if ($user) {
    $user->set_role('administrator');
    echo "Role set to administrator.";
}

—

### 2. **Ensure the User's Account Status Is Active**
Some security or membership plugins (like **AIOS** or **UsersWP**) may restrict admin access based on custom meta keys. For example:
– `aiowps_account_status`
– `wp_user_status`

**Check:**
Run a query to verify:

global $wpdb;
$meta_key = 'aiowps_account_status'; // Or the key you suspect
$result = $wpdb->get_var($wpdb->prepare("SELECT meta_value FROM {$wpdb->usermeta} WHERE user_id = %d AND meta_key = %s", 1, $meta_key));
echo "Account Status: " . $result;

**Expected Values:**
– `enabled` or `active`

If the status is invalid, update it:

update_user_meta(1, 'aiowps_account_status', 'enabled');

—

### 3. **Verify User Login Credentials**
Ensure the user has a valid password and can log in. You can reset the password programmatically:

wp_set_password('NewSecurePassword123', 1); // Replace 1 with the user ID.

—

### 4. **Check for Filters Preventing Admin Access**
Some plugins or custom code may block access to `wp-admin` using hooks like `admin_init` or `login_redirect`.

**Steps to Debug:**
– Temporarily disable all plugins:

rename('/path/to/wordpress/wp-content/plugins', '/path/to/wordpress/wp-content/plugins-disabled');

– Switch to a default theme like Twenty Twenty-Four by renaming the active theme folder.

If this resolves the issue, re-enable plugins one by one to identify the culprit.

—

### 5. **Check SSL or Rewrite Issues**
Ensure there are no rewrite or SSL redirection issues in `.htaccess` or `wp-config.php`.

– Check `.htaccess`:

# BEGIN WordPress
  <IfModule mod_rewrite.c>
  RewriteEngine On
  RewriteBase /
  RewriteRule ^index.php$ - [L]
  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteRule . /index.php [L]
  </IfModule>
  # END WordPress

– Check `wp-config.php` for incorrect `WP_HOME` or `WP_SITEURL` values:

define('WP_HOME', 'https://example.com');
  define('WP_SITEURL', 'https://example.com');

—

### 6. **Test Direct Access to Admin**
Try directly visiting URLs like:
– `https://example.com/wp-admin/index.php`
– `https://example.com/wp-admin/profile.php`

If these work but redirect incorrectly, investigate custom redirects or security plugins.

—

### 7. **Debug User Session Issues**
Check the `session_tokens` in user meta. If they’re invalid or corrupted, clear them:

delete_user_meta(1, 'session_tokens');

—

### 8. **Final Debugging Steps**
If none of the above work:
– Enable debugging:

define('WP_DEBUG', true);
  define('WP_DEBUG_LOG', true);
  define('WP_DEBUG_DISPLAY', false);

– Check the `wp-content/debug.log` file for errors.

—

Let me know if any of these steps resolve the issue or if additional debugging is needed!