Posted 2 years ago #
Hello!
I do have a big problem with the WP-Invites Plugin and my WPMU 2.8.3 Installation! The Plugin works fine, but if I activate it, the registration-page doesn’t check wheater the username already exists.
So someone is able to register with the same username. The effect is, that the new user overrides the original one. I need some help! Please!
Thanks Philipp
I hope an answer comes soon or I may check to see if I can add a security check to the plugin. What I've seen is that it does not override the current user, but what is does is add a new blog to the current user. If the user exists, it will use the users same info without re-creating it. Even though the person that signed up under the username will receive an email with login details, it will not work because only the person who owns the account is able to login because it is using the user's current info and login details.
However, the above only occurs when a user is registering for a blog. If the user is trying to register for a username only when the username already exists, the system will stop him.
But it would be interesting to see if it is really the plugin that is causing it, or whether this might be a bug in WPMU. If so, there needs to be a check, so that they user will have to be logged in to create a new blog.
I just checked, and it is definitely the plugin.
Posted 2 years ago #
Yes! You're right. It's a problem of the plugin. So what could we do to solve the problem? About 100 persons got an invitation-code and now i had to close the registration until I find a solution. But I don't know what to do now!
So is there everyone who is abler to help us? Please!
Greetings
Philipp
I sent an email to the developer. I am still waiting for a response, but in the meantime, I am trying to figure it out.
Posted 2 years ago #
Hello parkstreet!
Thats very nice. I hope you'll have success soon. Or an answer... ;)
I look forward to hear from you soon!
Thank you!
Posted 2 years ago #
Hallo parkstreet!
Do you have some news about the problem? I would like to solce it as soon as possible. It would be nice to hear from you soon!
Philipp
Sorry, but I have not been able to figure it out yet, and I havn't heard back from the developer either.
Posted 2 years ago #
Hello!
Thanks for you answer. Do you think that this plugin ( http://wpmudev.org/project/secure-invitations ) would work, too? I only want that the Site Admin is the only one who is able to send invites!
Greetings
The issue I have with that plugin is that any user can send an invitation. One user stated that away around it is to set the number of days equivalent to like 10 years or something like that.
Posted 2 years ago #
Oh. That's not so nice!
And you also don't know another plugin? The problem is that I got 15 mail with one question: "When can I register?". That's why I would like to open the registration again...
Greetings Philipp
There's this one, but I still don't think it is what you are looking for. I just don't see anything in the code that will explain why it will stop someone from registering for a current username but not stop them from registering for a blog with a current username.
Posted 2 years ago #
OK. Maybe this could be a solution for that time:
Do you think I could set the configuration that only users who are logged in are able tu set up a new blog? I do use BuddyPress and the registred users should be able to find the "Make a new blog" - Link.
If WP-Invite is able to check wheater a username exists, if they don't create a blog. That should work?! What's your oppinion?
Excuse me for my horrible english. I'm writing very fast and I'm not english. ;)
Yes, that will work. Even though, they are not registering for a blog, they still need an invite code. The invite code is per user and not per blog. The invitation code sits on the user's profile. So, when the user registers with for a username with the invitation code, once the account is activated, they will be able to create as many blogs as they need.
Posted 2 years ago #
no! It doesn't work! ;(
If I set "only registred user are able to make a blog" . the registration site shows: "You have to be logged in to make a new blog".
And if I activate "Only registration is allowed" WordPress don't check wheater the uername already exists. That's no solution... ;(
I don't have more idears...
Well, this is a last resort. But you have to remember this every time you upgrade. Reset the option back to "Enabled. Blogs and user accounts can be created." Then in wp-signup.php comment out the Gimme a blog line like so,
<!--<input id="signupblog" type="radio" name="signup_for" value="blog" <?php echo $signup['blog'] ?> />
<label class="checkbox" for="signupblog"><?php _e('Gimme a blog!') ?></label>-->Then on line 230, change it to
$signup[ 'user' ] = 'checked="checked"';Now what happens is that when someone visits your signup page, they will only see the "Just a username, please" option which will be already selected because of what was changed above. Once the user activates his or her account, they will be able to create blogs from the buddypress bar because you have the Blogs and User accounts enabled.
Posted 2 years ago #
Hum! Thank you so much. But it doesn't work for me. I don't know why!
What doesn't work?
Posted 2 years ago #
I still can choose wheater I only want an Username or an Blog!
Oh, wait a minute. Are you going to the buddypress registration page at example.com/register?
Posted 2 years ago #
Yes I do... But I think that this brings me to the normal wp_signup.php.
No, it actually brings you to another file. I forgot that you are using buddypress. You need to make those changes twice. The second change is at /plugins/buddypress/bp-core/bp-core-signup.php. You need to make the same changes to this file as well. Line 230, change to user and comment out the gimme blog line (you will start at the first <p> tag and end at the first closing </p> tag. Sorry about that, I forgot that you have to do it in two places. The two files have nothing to do with each other. Sometimes, people will go directly to wp-signup.php instead of clicking on the register link at your buddypress install.
Posted 2 years ago #
Ok. I'll try it. But could it be that the plugin has the problem in reason of this file: /plugins/buddypress/bp-core/bp-core-signup.php
Maybe that's the problem of the plugin?
No, I use the plugin with my users registering at wp-signup.php.
Posted 2 years ago #
Ok! Now I can only choose that I want to register only. But I get the "Congratulations"-Page and also an email with the activation link. Why does the page not check wheater the username already exists?
That's the big question. Thank you sooooo much. But I don't know weather this is enough... ;(
Can you try to use the wp-signup.php and see if you get the same problem. I might be forgetting to comment something out, but choosing the username option worked before even doing any of that. I will check it out more when I get home.
Posted 2 years ago #
Yes. It's the same problem with the wp-signup.php. ;(
Some other Idear?
Thanks a lot!
Posted 2 years ago #
Hello parkstreet!
Du you have some news? Otherwise I cant't find a solution and so I would try it withe the Secure Invite plugin. But I really don't want to... ;(
Problem with WP-Invites fixed.
Please, put feedback with correct tags - or I won't be able to read it because I don't read forum.
Also, you can leave feedback in my (author's) blog, the link is on the plugin page.
This topic has been closed to new replies.
