[Plugin: Register Plus Redux] User can register without confirmation of his account

  • Resolved Dmytro

    (@azzepis)


    13 years, 6 months ago

    I register a new account. When I need just use “lost password” function (and don’t need confirm my email!), and wordpress sends me my “temporary” login and link to set a new password. So, now I can login to blog without activation of my account.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author radiok

    (@radiok)

    13 years, 6 months ago

    That’s an interesting loophole, in reality that does confirm the email, since it will send your information to your email on file and you wouldn’t be able to login if that weren’t a legitimate email address! However, that’s very undesirable, for 1 we don’t want people actually using those temp logins, and for another, if they do use them for more than the grace period without actually verified they will just be purged. I’ll look into closing this loophole immediately.

    Thread Starter Dmytro

    (@azzepis)

    13 years, 6 months ago

    thanks

    Plugin Author radiok

    (@radiok)

    13 years, 6 months ago

    I patched this hole today, this issue is resolved in version 3.6.17

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘[Plugin: Register Plus Redux] User can register without confirmation of his account’ is closed to new replies.