• Resolved Bub

    (@jdenning47)


    Topic says it all. Register New User sends generated password through email. It User forgets password and clicks Reset Password, User gets sent to User Profile page. I have blocked this page as I don’t want a non-registered person to be able to access this page and potentially get to my database. Since it is blocked this page offers New User Registration or Existing User Login. Current user cannot reset password.
    ALSO
    As Admin I am unable to unblock this page no matter what I do including deactivating and reactivating WP-MEMBERS.
    -Please help!!
    (Twenty Fifteen Theme – WP v 4.1)

    https://wordpress.org/plugins/wp-members/

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Chad Butler

    (@cbutlerjr)

    I think that the reason it appears that you can’t unblock the page may be because of the change in 2.9.8 that changes the post meta for blocking. In order to make the process of migrating to a new post meta key low impact, the old post meta are recognized.

    So, from a practical application standpoint in plain English, I think you probably had the page blocked in a version earlier, then applied the update. I can see where that may be confusing. What you need to do is get rid of the old “block” and/or “unblock” post meta values. You can do that by editing the custom fields for the page. (If your post edit view does not have custom fields viewable, look to the upper right hand corner of the screen for Screen Options, open that menu and check off “Custom Fields”.) Look for Custom Fields called “block” or “unblock” and delete them.

    As for the User Profile page, I am assuming here that we are talking about a page that contains the shortcode [wp-members page=user-profile]. If not, that’s what we should be talking about because that’s what you need to manage the password reset (among other things). Once you have a page with this shortcode in the content area, you can set the location of the page in the plugin’s options. That setting is what creates the forgot password link.

    Regarding blocking this page, you can’t actually block this page; and if you do, the plugin will ignore that. The page handles what content it delivers and the processes it manages based solely on the user and the user’s login state.

    If a user is not logged in, this page allows a user to log in or register. It also handles password reset in this case.

    For a logged in user, the page handles updating of profile information and changing your password.

    Thread Starter Bub

    (@jdenning47)

    Chad,
    The ‘custom fields’ thing worked. Once the User Profile page was unblocked I could reset the password in the expected fashion. I am doing a very loose member login scheme where I don’t block any of the user pages. What I do is make these pages not appear in the menu where the display mode is “by logged in users”. This is allows Google, etc. to crawl the site but a casual user would not figure out how to find members only stuff. The member login is mainly to allow us to capture their email to allow for future contact. What I didn’t want is some sophisticated hacker to find the user profile page and get into my user database ergo, I blocked this page and only this page for non-members. I may be over thinking this issue and will be leaving this page unblocked. – Anyway – Thanks for the help, I learned something new today….

    Thanks Chad! Fixed my problem too!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Forgot Password not sending email & cannot unblock User Profile page’ is closed to new replies.