WordPress.org

1. John Smith
   Member
   Posted 11 months ago #
   

   Hi,

   I have been doing some testing and have realised users can login without having verified their email address? Is this normal behaviour?

2. Seacoast Web Design
   Member
   Posted 11 months ago #
   

   Yes, so make sure the deafult role is subscriber. Subscribers cannot post or edit anything.

3. John Smith
   Member
   Posted 11 months ago #
   

   Thanks for confirming, I thought I was going insane.

   If that's the case though, how can I stop them from signing in if their user_status is still 2?

   I only ask because I use plugins like BuddyPress and don't want them to be able to post anything or update their profile until they're activated.

4. Seacoast Web Design
   Member
   Posted 11 months ago #
   

   What version of WP are you using?

5. John Smith
   Member
   Posted 11 months ago #
   

   Always the latest :) 3.3.2

6. Seacoast Web Design
   Member
   Posted 11 months ago #
   

   site link?

7. John Smith
   Member
   Posted 11 months ago #
   

   Okay, I found the problem. It's the plugin WP Email Login: http://wordpress.org/extend/plugins/wp-email-login/

   When a user uses their email address and not their user to login, it's not checked to see if they're active or not.

Reply

You must log in to post.