function login_with_email_address($user, $username, $password)
{
    $user = get_user_by('email', $username);
    if (!empty($user->user_login)) {
        $username = $user->user_login;
    }
    return wp_authenticate_username_password(null, $username, $password);
}

function bcs_el_login_with_email($user, $username, $password)
{
    if (is_email($username)) {
        $user = get_user_by_email($username);
        if ($user) {
            $username = $user->user_login;
        }
    }
    return wp_authenticate_username_password(null, $username, $password);
}

function bainternet_allow_email_login($user, $username, $password)
{
    if (is_email($username)) {
        $user = get_user_by('email', $username);
        if ($user) {
            $username = $user->user_login;
        }
    }
    return wp_authenticate_username_password(null, $username, $password);
}

 public static function authenticate($user, $username, $password)
 {
     if (is_email($username)) {
         $user = get_user_by('email', $username);
         if ($user) {
             $username = $user->user_login;
         }
     }
     return wp_authenticate_username_password(null, $username, $password);
 }

 /**
  * Enable login with e-mail address
  *
  * @param  obj    $user     WP User.
  * @param  string $username WP User username.
  * @param  string $password Passeword.
  * @return boolean True/false after authentification
  */
 function moove_email_login_filter($user, $username, $password)
 {
     if (is_email($username)) {
         $user = get_user_by('email', $username);
         if ($user) {
             $username = $user->user_login;
         }
     }
     return wp_authenticate_username_password(null, $username, $password);
 }

/**
 * If an email address is entered in the username box, then look up the matching username and authenticate as per normal, using that.
 *
 * @param string $user
 * @param string $username
 * @param string $password
 * @return Results of autheticating via wp_authenticate_username_password(), using the username found when looking up via email.
 */
function dr_email_login_authenticate($user, $username, $password)
{
    if (is_a($user, 'WP_User')) {
        return $user;
    }
    if (!empty($username)) {
        $username = str_replace('&', '&', stripslashes($username));
        $user = get_user_by('email', $username);
        if (isset($user, $user->user_login, $user->user_status) && 0 == (int) $user->user_status) {
            $username = $user->user_login;
        }
    }
    return wp_authenticate_username_password(null, $username, $password);
}

function my_authenticate_username_password($user, $username, $password)
{
    // If an email address is entered in the username box,
    // then look up the matching username and authenticate as per normal, using that.
    if (!empty($username)) {
        //if the username is not email set username to blank string
        //causes authenticate to fail
        if (!filter_var($username, FILTER_VALIDATE_EMAIL)) {
            $username = time();
        }
        $user = get_user_by('email', $username);
    }
    if (isset($user->user_login, $user)) {
        $username = $user->user_login;
    }
    // using the username found when looking up via email
    return wp_authenticate_username_password(NULL, $username, $password);
}

 public function authenticate($user, $username, $password)
 {
     if (is_a($user, 'WP_User')) {
         return $user;
     }
     if (!empty($username) && is_email($username)) {
         $user = get_user_by('email', $username);
         if (isset($user, $user->user_login, $user->user_status)) {
             if (0 === intval($user->user_status)) {
                 $username = $user->user_login;
                 return wp_authenticate_username_password(null, $username, $password);
             }
         }
     }
     if (!empty($username) || !empty($password)) {
         return false;
     } else {
         return wp_authenticate_username_password(null, "", "");
     }
 }

 function crowdx_fallBackLogin()
 {
     if ($this->options['all_users'] == 0) {
         //check metadata on this user
         $user = get_user_by('login', sanitize_user($_POST['log']));
         $crowd = get_user_meta($user->ID, 'crowdx', true);
         if ($crowd == false) {
             remove_action('authenticate', 'wp_authenticate_username_password', 20);
             return false;
         }
         //allow to login below
     }
     $rem = $_POST['rememberme'] == 'forever' ? true : false;
     $secure = $_SERVER["SERVER_PORT"] == "443" ? true : false;
     $userArray = array('user_login' => $_POST['log'], 'user_password' => $_POST['pwd'], 'remember' => $rem);
     $user = wp_authenticate_username_password('', $_POST['log'], $_POST['pwd']);
     if (is_wp_error($user)) {
         remove_action('authenticate', 'wp_authenticate_username_password', 20);
         return false;
     }
     return true;
 }

function tfaVerifyCodeAndUser($user, $username, $password)
{
    $installed_version = get_option('tfa_version');
    if ($installed_version < 4) {
        return $user;
    }
    $tfa = getTFAClass();
    if (is_wp_error($user)) {
        return $user;
    }
    $params = $_POST;
    $params['log'] = $username;
    $params['caller'] = $_SERVER['PHP_SELF'] ? $_SERVER['PHP_SELF'] : $_SERVER['REQUEST_URI'];
    $code_ok = $tfa->authUserFromLogin($params);
    if (!$code_ok) {
        return new WP_Error('authentication_failed', __('<strong>ERROR</strong>: The Two Factor Code you entered was incorrect.', TFA_TEXT_DOMAIN));
    }
    if ($user) {
        return $user;
    }
    return wp_authenticate_username_password(null, $username, $password);
}

function rublon2factor_authenticate($user, $username, $password)
{
    $user = wp_authenticate_username_password($user, $username, $password);
    if (is_wp_error($user)) {
        return $user;
    } else {
        do_action('rublon_pre_authenticate', $user);
        $user_id = RublonHelper::getUserId($user);
        if (is_user_member_of_blog($user_id) && RublonHelper::isSiteRegistered()) {
            wp_logout();
            $remember = !empty($_POST['rememberme']);
            $authURL = RublonHelper::authenticateWithRublon($user, $remember);
            if (empty($authURL)) {
                if (RublonHelper::canShowBusinessEditionUpgradeBoxAfterLogin($user)) {
                    RublonHelper::setMessage('BUSINESS_EDITION_UPGRADE_BOX', 'updated', 'RC');
                }
                $levels = RublonRolesProtection::getProtectionTypesLevels();
                if ($levels[RublonHelper::getUserProtectionType()] >= $levels[RublonHelper::PROTECTION_TYPE_MOBILE]) {
                    $user_email = RublonHelper::getUserEmail($user);
                    $obfuscated_email = RublonHelper::obfuscateEmail($user_email);
                    RublonHelper::setMessage('ROLE_BLOCKED|' . base64_encode($obfuscated_email), 'error', 'LM');
                    $return_page = RublonHelper::getReturnPage();
                    wp_safe_redirect(wp_login_url($return_page));
                    exit;
                } else {
                    RublonHelper::setMobileUserStatus($user, RublonHelper::NO);
                    return $user;
                }
            } else {
                RublonHelper::setLoginToken($user);
                wp_redirect($authURL);
                exit;
            }
        } else {
            return $user;
        }
    }
}

function um_wp_form_errors_hook_logincheck($user, $username, $password)
{
    remove_filter('authenticate', 'wp_authenticate_username_password', 20, 3);
    if (isset($user->ID)) {
        um_fetch_user($user->ID);
        $status = um_user('account_status');
        switch ($status) {
            case 'inactive':
                return new WP_Error($status, __('Your account has been disabled.', 'ultimatemember'));
                break;
            case 'awaiting_admin_review':
                return new WP_Error($status, __('Your account has not been approved yet.', 'ultimatemember'));
                break;
            case 'awaiting_email_confirmation':
                return new WP_Error($status, __('Your account is awaiting e-mail verification.', 'ultimatemember'));
                break;
            case 'rejected':
                return new WP_Error($status, __('Your membership request has been rejected.', 'ultimatemember'));
                break;
        }
    }
    return wp_authenticate_username_password($user, $username, $password);
}

function um_wp_form_errors_hook_logincheck($user, $username, $password)
{
    remove_filter('authenticate', 'wp_authenticate_username_password', 20, 3);
    if (isset($user->ID)) {
        um_fetch_user($user->ID);
        $status = um_user('account_status');
        switch ($status) {
            case 'inactive':
                return new WP_Error($status, __('Ваш аккаунт был отключен.', 'ultimatemember'));
                break;
            case 'awaiting_admin_review':
                return new WP_Error($status, __('Ваш аккаунт не был одобрен еще.', 'ultimatemember'));
                break;
            case 'awaiting_email_confirmation':
                return new WP_Error($status, __('Ваша учетная запись ожидает проверки электронной почты.', 'ultimatemember'));
                break;
            case 'rejected':
                return new WP_Error($status, __('Ваш запрос на вступление была отклонена.', 'ultimatemember'));
                break;
        }
    }
    return wp_authenticate_username_password(null, $username, $password);
}

 function check_custom_authentication($user, $username, $password)
 {
     global $wpdb;
     $error = new WP_Error();
     if (is_a($user, 'WP_User')) {
         return $user;
     }
     // 		$rolename ='subscriber';
     // 		var_dump($rolename);
     // 		$role = get_role($rolename);
     // 		var_dump($role);exit();
     if (empty($username) || empty($password)) {
         //create new error object and add errors to it.
         if (empty($username)) {
             //No email
             $error->add('empty_username', __('<strong>ERROR</strong>: Email field is empty.'));
         }
         if (empty($password)) {
             //No password
             $error->add('empty_password', __('<strong>ERROR</strong>: Password field is empty.'));
         }
         return $error;
     }
     $role_allow = false;
     $user_obj = get_user_by('login', $username);
     if (is_object($user_obj)) {
         //$error->add('empty_username', __("<strong>ERROR</strong>: The user doesn't exist."));
         //return $error;
         $role = implode(', ', $user_obj->roles);
         if ($role != self::DOLIBARR_ROLE) {
             $role_allow = true;
         }
     }
     //var_dump($user_obj->ID);exit;
     //$resp = $this->createTransaction($user_obj->ID, 8);
     //var_dump($resp,'response');exit;
     // Si c'est pas le profile de lecteur de dolibarr
     // authentication normale de wp
     if ($role_allow) {
         return wp_authenticate_username_password($user, $username, $password);
     } else {
         // verifier dans dolibarr
         $rep = $this->dolibarr->dolibarr_check_authentication($username, $password);
         if (isset($rep["result"]["result_code"]) && $rep["result"]["result_code"] == 'OK') {
             if (username_exists($username)) {
                 $user = get_userdatabylogin($username);
                 return $user;
             } else {
                 $userdata = array('user_login' => $username, 'user_pass' => $password, 'user_email' => is_email($username) ? $username : null, 'role' => self::DOLIBARR_ROLE);
                 $user_id = wp_insert_user($userdata);
                 //On success
                 if (!is_wp_error($user_id)) {
                     #var_dump(is_plugin_active('memberpress/memberpress.php'));
                     if (is_plugin_active('memberpress/memberpress.php')) {
                         $resp = $this->createTransaction($user_id, 3048);
                         #var_dump($user_id, $resp);
                     }
                     //var_dump($resp,'response');exit;
                     $user = get_userdatabylogin($username);
                     #var_dump($user);
                     return $user;
                 } else {
                     $error = new WP_Error();
                     $error->add('registration_error', __('<strong>ERROR</strong>: There was an error registering your account. Please try again.'));
                     return $error;
                 }
             }
         } else {
             $error = new WP_Error();
             $error->add('incorrect_credentials', __('<strong>ERROR</strong>:' . $rep["result"]["result_label"]));
             return $error;
         }
     }
 }

 function override_authentication($user, $username, $password)
 {
     // Mirror standard WP authentication
     if (is_a($user, 'WP_User')) {
         return $user;
     }
     if (!empty($username)) {
         // We have a login attempt so we are going to take over the authentication here
         // 1. Check the user exists
         if ($user = get_user_by('login', $username)) {
             // 2. We have a user so check if they have an expired password.
             if (!shrkey_has_usermeta_oncer($user->ID, '_shrkey_password_expired')) {
                 // No expired password setting for this user so fall through to original authentication
                 return;
             }
             // 3. We now need to authentication this user ourselves before we can continue
             $authenticated = wp_authenticate_username_password('', $username, $password);
             if (is_wp_error($authenticated)) {
                 // The credentials are not valid, so we'll return and fall through to the original function
                 return;
             }
             // We are still here so remove the original authentication method as we no longer need it
             remove_action('authenticate', 'wp_authenticate_username_password', 20, 3);
             // 4. Show the change password form as we want to force a password change at this point
             $this->show_reset_password_form($authenticated, wp_generate_password(35, false), isset($_POST['redirect_to']) ? $_POST['redirect_to'] : false);
             // Exit because we don't want to continue processing or pass anything along the chain at this point
             exit;
         } else {
             // Invalid username - return and fall through to the original authentication function handle it
             return;
         }
     }
     return;
 }

 /**
  * Validate a user's credentials.
  *
  * @param  array $credentials
  * @return bool
  */
 public function validate(array $credentials = array())
 {
     $username = $this->getLoginCredential($credentials);
     $password = $this->getPasswordCredential($credentials);
     $user = wp_authenticate_username_password(null, $username, $password);
     if (is_wp_error($user)) {
         return false;
     }
     return true;
 }

function duo_authenticate_user($user = "", $username = "", $password = "")
{
    // play nicely with other plugins if they have higher priority than us
    if (is_a($user, 'WP_User')) {
        return $user;
    }
    if (!duo_auth_enabled()) {
        duo_debug_log('Duo not enabled, skipping 2FA.');
        return;
    }
    if (isset($_POST['sig_response'])) {
        // secondary auth
        remove_action('authenticate', 'wp_authenticate_username_password', 20);
        $akey = duo_get_akey();
        $duo_time = duo_get_time();
        $username = Duo::verifyResponse(duo_get_option('duo_ikey'), duo_get_option('duo_skey'), $akey, $_POST['sig_response'], $duo_time);
        if ($username) {
            // Don't use get_user_by(). It doesn't return a WP_User object if wordpress version < 3.3
            $user = new WP_User(0, $username);
            duo_set_cookie($user);
            duo_debug_log("Second factor successful for user: {$username}");
            return $user;
        } else {
            $user = new WP_Error('Duo authentication_failed', __('<strong>ERROR</strong>: Failed or expired two factor authentication'));
            return $user;
        }
    }
    if (strlen($username) > 0) {
        // primary auth
        // Don't use get_user_by(). It doesn't return a WP_User object if wordpress version < 3.3
        $user = new WP_User(0, $username);
        if (!$user) {
            error_log("Failed to retrieve WP user {$username}");
            return;
        }
        if (!duo_role_require_mfa($user)) {
            duo_debug_log("Skipping 2FA for user: {$username} with roles: " . print_r($user->roles, true));
            return;
        }
        remove_action('authenticate', 'wp_authenticate_username_password', 20);
        $user = wp_authenticate_username_password(NULL, $username, $password);
        if (!is_a($user, 'WP_User')) {
            // on error, return said error (and skip the remaining plugin chain)
            return $user;
        } else {
            duo_debug_log("Primary auth succeeded, starting second factor for {$username}");
            duo_start_second_factor($user);
        }
    }
    duo_debug_log('Starting primary authentication');
}

/**
 * Authenticate the user and decide which login method to use.
 *
 * @since 1.0.3
 * @param  string $user     user object
 * @param  string $username typed username
 * @param  string $password typed password
 * @return void Results of autheticating via wp_authenticate_username_password(), using the username found when looking up via email.
 */
function wpaam_authenticate_login_method($user, $username, $password)
{
    // Get default login method
    $login_method = wpaam_get_option('login_method', 'username');
    // Authenticate via email only
    if ($login_method == 'email') {
        if (is_a($user, 'WP_User')) {
            return $user;
        }
        if (!empty($username) && is_email($username)) {
            $user = get_user_by('email', $username);
            if (isset($user, $user->user_login, $user->user_status) && 0 == (int) $user->user_status) {
                $username = $user->user_login;
            }
            return wp_authenticate_username_password(null, $username, $password);
        }
    } else {
        if ($login_method == 'username_email') {
            if (is_a($user, 'WP_User')) {
                return $user;
            }
            $username = sanitize_user($username);
            if (!empty($username) && is_email($username)) {
                $user = get_user_by('email', $username);
                if (isset($user, $user->user_login, $user->user_status) && 0 == (int) $user->user_status) {
                    $username = $user->user_login;
                }
                return wp_authenticate_username_password(null, $username, $password);
            } else {
                return wp_authenticate_username_password(null, $username, $password);
            }
        }
    }
}

        if ($app->request->isGet()) {
            $data['school'] = $school->toArray();
        } else {
            if ($app->request->isPost()) {
                $school->name = $app->request->post('name');
                $school->save();
                $data['new_school'] = $school->toArray();
            }
        }
        $app->render('schools/edit.html', $data);
    })->via('GET', 'POST')->name('schools_edit');
});
$app->map('/login', function () use($app) {
    $data = array();
    if ($app->request->isPost()) {
        $auth = wp_authenticate_username_password(NULL, $app->request->post('username'), $app->request->post('password'));
        if (is_wp_error($auth)) {
            $data['error'] = 'Gebruikersnaam of wachtwoord is fout';
        } else {
            $_SESSION['loggedin'] = true;
            $app->redirect($app->urlFor('dashboard'));
        }
    }
    $app->render('login.html', $data);
})->via('GET', 'POST')->name('login');
$app->get('/logout', function () use($app) {
    session_destroy();
    $app->redirect($app->urlFor('login'));
})->name('logout');
if (!isset($_SESSION['loggedin']) || $_SESSION['loggedin'] == false) {
    if ($app->request->getResourceUri() != '/login') {

function bbconnect_email_authenticate($user, $username, $password)
{
    $user = get_user_by('email', $username);
    if ($user) {
        $username = $user->user_login;
    }
    return wp_authenticate_username_password(null, $username, $password);
}