- April 27, 2019 at 10:50 am #10008128
I have had several instances where new users have registered without admin approval. I only go an e-mail with the following content:
New user registration on your site *blabla* Site:
Username: meet Cheryl and Laura www.***.com
New users that use the PR form do show as unverified users and I get the correct mail at the correct address
Is it possible to bypass the registration form? This is a security leakApril 28, 2019 at 6:04 am #10008130
Today I got 14 new instances.
How can I block new registrations completely?April 28, 2019 at 6:14 am #10008131
Can this be the wp Settings -> General -> Membership: everyone can register?
I just disabled this setting but I’m not sure if people can still register with the PR form.April 30, 2019 at 1:44 am #10008133
PR Team MemberKeymaster
If you disable Membership from General > Settings then user can’t register on your website with PR form also. Go to PR menu > Settings > Overrides page. Make sure WP default login page is disable. See screenshot: http://prntscr.com/nikc0y
Also, make sure that Admin approval is selected in PR menu > Settings > Security page.
Best,May 5, 2019 at 3:54 am #10008138
The settings you advice are the settings I did have and gave me the problems.
With these settings I get the new users registrations bypassing the PR form & get immediate approval.
Actually after changing the general setting to “anyone can register” I got a new user within 5 min.
I also enabled the invitation code option. The registration just ignored this option.
It it possible to use a script to get an account without using the PR form?May 6, 2019 at 2:57 am #10008140
You must be logged in to reply to this topic.