How do I prevent people self registering themselves WP-Members

  • ingasos

    (@ingasos)


    5 years, 8 months ago

    Hi, I’ve had a look through the forums and can’t find a solution for my problem. I’ve created a members section on the http://www.pngc.co.uk website which work well and us the WP-Members plugin to manage the access and the members. I don’t want people to be able to register themselves so that all requests should be sent by email. You will see if you go to the members section and try to login it gives you the option to either reset your password or register. Either option takes you to a page which allows you to email your request to an admin email address. Despite the above setup I get a notification from time to time that someone has successfully registered for the members section. Fortunately I get an email notification for the new registration so I have to log into the site and remove their ID. What am I doing wrong? How can I prevent people registering for the members section? It’s almost as if there is a back door which allows people to register themselves.

    Thanks in advance for any suggestions.

    Siggi

    The page I need help with: [log in to see the link]

Viewing 6 replies - 1 through 6 (of 6 total)
  • Joy

    (@joyously)

    5 years, 8 months ago

    On the admin page for Settings > General there is a checkbox for Membership. If checked, anyone can register. Make sure it is not checked.

    Thread Starter ingasos

    (@ingasos)

    5 years, 8 months ago

    Hi Joy and thanks for the feedback / suggestion. Unfortunately this box is not ticked so that not the problem. What I don’t understand is how they get the registration page as I have created a “pointer” to my pages for the lost password and new registration requests.

    sinip

    (@sinip)

    5 years, 8 months ago

    In that case you might be having some security hole in your solution. Where exactly is almost impossible to tell from outside.

    Thread Starter ingasos

    (@ingasos)

    5 years, 8 months ago

    Hi,
    It’s all fairly basic in that I have not altered any HTML code, but I have just used basic templates and plugins. But I agree that it might be difficult to find the problem. I wondered if someone (on here) would go to my website and try and register themselves to see if they can find a back door or how the users find the registration form, unless of course they are using some other way to get registered. The website is http://www.pngc.co.uk (it’s a gliding club) you will see a members section tab, this will take you to the login screen. When you enter incorrect info it should take you to the page that basically says to click on a email address to get registered.

    Davood Denavi

    (@binarywc)

    5 years, 8 months ago

    Yes, it sounds to me like you’re install has been compromised.

    Remain calm, get yourself a nice mug of your favorite beverage, and carefully follow this guide. When you’re done, you may want to implement some (if not all) of the recommended security measures and start backing up your site.

    Thread Starter ingasos

    (@ingasos)

    5 years, 8 months ago

    Thanks for the feedback and the links to the various info sites. I’ll start reviewing my site with the appropriate drink in hand 🙂

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘How do I prevent people self registering themselves WP-Members’ is closed to new replies.