Support » Everything else WordPress » Visibility – password protected page – not protected

  • I have a security issue that I can’t seem to resolve.
    I have a site where there are both ‘public’ pages and ‘private’ pages. I set it up so that a user must have an ID and Password to view the private pages – and I’m using WP-Members version 2.7.3 to supply the ID and Password functions. I have the custom field, for the ‘private’ pages, ‘blocked’ with a value of ‘true’.
    In addition to and actually in one of the ‘private’ pages – I have an embedded table that I wanted additional security for. I’m using WP-Table Reloaded version 1.9.3 and inserted the table using [table id=1 /].
    My problem is that even thought, and for this particular page,I checked the page visibility to ‘Password Protected’ (and gave it a unique password). More time than not, after entering the ID and Password to get at any of the private pages, one can also access this password protected page and table without being asked for the additional password. This is true for admin and other type users (like Subscriber).
    Any ideas of what I might be doing wrong?

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter jimp2012

    (@jimp2012)

    FYI…..This error (password protection is bypassed) occurs on both IE9 and Chrome

    Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    🏳️‍🌈 Advisor and Activist

    More time than not, after entering the ID and Password to get at any of the private pages, one can also access this password protected page and table without being asked for the additional password. This is true for admin and other type users (like Subscriber).

    Yes… You don’t have to enter the password to the page more that once. Why?

    Thread Starter jimp2012

    (@jimp2012)

    Thanks for getting back to me and sorry; I guess I did not make it clear what I’m trying to do.
    I want to have three levels of security:
    1.Public Pages that the general user / public can view
    2.Private Pages;
    —–>2a.A group of Pages that are ID / password protected (WP-Members)
    —–>2b.(I’ll call it)a special page in this private group, that in addition to being ID/password protected, has an addition level of security and requires a unique ‘page password’ to view.

    I thought / would think that the page ‘visibility’ function would give me this additional level security for that special page.
    I hope this helps explain what I’m trying to do.

    Thanks,
    Jim

    Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    🏳️‍🌈 Advisor and Activist

    It might be the plugin that causes the issue, but if you use the default WordPress password protection on a post, it works just like you describe in 2b.

    Thread Starter jimp2012

    (@jimp2012)

    I’ll post this on the WP-Members site to see what Chad has to say…..

    Thanks,
    Jim

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Visibility – password protected page – not protected’ is closed to new replies.