WordPress.org

Ready to get started?Download WordPress

Forums

Register Plus Redux
[resolved] User can register without confirmation of his account (4 posts)

  1. AzzePis
    Member
    Posted 3 years ago #

    I register a new account. When I need just use "lost password" function (and don't need confirm my email!), and wordpress sends me my "temporary" login and link to set a new password. So, now I can login to blog without activation of my account.

  2. radiok
    Member
    Plugin Author

    Posted 3 years ago #

    That's an interesting loophole, in reality that does confirm the email, since it will send your information to your email on file and you wouldn't be able to login if that weren't a legitimate email address! However, that's very undesirable, for 1 we don't want people actually using those temp logins, and for another, if they do use them for more than the grace period without actually verified they will just be purged. I'll look into closing this loophole immediately.

  3. AzzePis
    Member
    Posted 3 years ago #

    thanks

  4. radiok
    Member
    Plugin Author

    Posted 3 years ago #

    I patched this hole today, this issue is resolved in version 3.6.17

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic