If you send them a link without wp-login.php on the end, they still need to login, otherwise, why register?
And once they login, they will go to the backend.
The backend for a subscriber cannot wreck your site. They have no options available other than to edit their own profile.
But you can use:
http://wordpress.org/extend/plugins/peters-login-redirect/
something like that
It redirects to a page of your choice on login, rather than the dash
Thanks Voodoo,
I should have been a little more specific. I want them to go to the home page of our site and log in from there. I understand they cannot do any damage logging into the back end, it is more for aesthetics.
Thanks for the plugin info, I will give that a try.
Scott
Actually, a subscriber MIGHT be able to do damage — there have been several WP security holes that allowed non-privileged users to execute queries that they shouldn’t have been able to do — e.g. URL manipulation could allow for improperly sanitized data to perform a SQL injection attack. Some of these types of holes have been found and patched in the WP core… but who knows when the next vulnerability will be discovered. And lord, there are some horrible plugins out there that do awful things with virtually no security. And WP’s poor theme architecture allows THEMES to be hacked. That one really grinds my gears from an architectural standpoint.
To follow up on Rev. Voodoo’s post, there’s also a plugin called “Theme My Login” that lets you put login forms elsewhere on your site.
