Enhanced OneLogin Password Fix

fixpw.php

<?php
/**
 * This script search user with @@@nopass@@@ passwords and replace them by random passwords
 */

add_filter( 'send_password_change_email', '__return_false' );

$users = get_users();

foreach ($users as $user) {
    $auth = wp_authenticate($user->user_login, '@@@nopass@@@');
    if (!is_wp_error($auth) ) {
        $auth->user_pass = wp_generate_password(20, true);
        wp_update_user($auth);
        echo "User {$auth->ID} updated \n";
    } else {
        echo "User {$user->ID} doesn't have the bad password \n";
    }
}

Based on https://gist.github.com/pitbulk/a8223c90a3534e9a7d5e0a93009a094f, this script should be put in the WordPress directory and executed using wp-cli with the command wp eval-file fixpw.php. Improvements over the original include:

• Disabling of password reset email
• Output to validate what changes have been made
• Fixes error regarding HTTP_HOST variable