New user registration despite option turned off

  • Resolved kirstenosa

    (@kirstenosa)


    3 years, 4 months ago

    I have just received several successful user registrations from the same email domain (please do not publish emails)

    I have NOT ‘Anyone can register’ ticked.

    Having enabled debug I can see they are managing this via your forum plugin.
    Here is an extract of the debug.log. Please can you let me know how I can stop this?

    Thanks

    
1) /home/.../index.php(17): require('/home/...')
2) /home/.../wp-blog-header.php(16): wp()
3) /home/.../wp-includes/functions.php(1285): WP->main('')
4) /home/.../wp-includes/class-wp.php(758): do_action_ref_array('wp', Array)
5) /home/...wp-includes/plugin.php(544): WP_Hook->do_action(Array)
6) /home/.../wp-includes/class-wp-hook.php(311): WP_Hook->apply_filters('', Array)
7) /home/.../wp-includes/class-wp-hook.php(287): wpForo->init(Object(WP))
8) /home/.../wp-content/plugins/wpforo/wpforo.php(297): do_action('wpforo_after_in...')
9) /home/.../wp-includes/plugin.php(478): WP_Hook->do_action(Array)
10) /home/.../wp-includes/class-wp-hook.php(311): WP_Hook->apply_filters(NULL, Array)
11) /home/.../wp-includes/class-wp-hook.php(287): wpForoAction->do_actions('')
12) /home/.../wp-content/plugins/wpforo/wpf-includes/class-actions.php(131): do_action('wpforo_action_w...')
13) /home/.../wp-includes/plugin.php(478): WP_Hook->do_action(Array)
14) /home/.../wp-includes/class-wp-hook.php(311): WP_Hook->apply_filters('', Array)
15) /home/.../wp-includes/class-wp-hook.php(287): wpForoAction->registration('')
16) /home/.../wp-content/plugins/wpforo/wpf-includes/class-actions.php(349): wpForoMember->create(Array)
17) /home/.../wp-content/plugins/wpforo/wpf-includes/class-members.php(262): register_new_user('test38711360', 'test38711360@td...')
18) /home/.../wp-includes/user.php(2578): wp_create_user('test38711360', 'iq5tsxsR3ZLs', 'test38711360@td...')
19) /home/.../wp-includes/user.php(2188): wp_insert_user(Array)
20) /home/.../wp-includes/user.php(1860): apply_filters('insert_user_met...', Array, Object(WP_User), false)
21) /home/.../wp-includes/plugin.php(206): WP_Hook->apply_filters(Array, Array)
22) /home/.../wp-includes/class-wp-hook.php(289): {closure}(Array, Object(WP_User))
23) /home/.../wp-content/plugins/wpum-registration-trace/wpum-registration-trace.php(44): wpum_trace('wp_insert_user ...')
    • This topic was modified 3 years, 4 months ago by Yui.
    • This topic was modified 3 years, 4 months ago by Yui.
Viewing 4 replies - 1 through 4 (of 4 total)
  • Thread Starter kirstenosa

    (@kirstenosa)

    3 years, 4 months ago

    This is not spam posts it’s Hackers using your plugin to register new users on my site. User Registration is switched off so they should not be able to do this. However, they have found a loophole in your code that somehow allows them to do do it. From the debug code above you can see the your plugin being used.

    I would be grateful if you could take a look and help fix this.

    Thanks

    Plugin Author gVectors Team

    (@gvectors-team)

    3 years, 4 months ago

    @kirstenosa,
    There are two places that you should switch off:
    1. Dashboard > Settings > General Tab
    2. Dashboard > Forums > Settings > Features Tab, the option name is “Enable User Registration”, just set it “NO”.

    In case you’ll open the user registration, please, read this FAQ topic for better protection: https://wpforo.com/community/faq/how-to-stop-spam/

    Thread Starter kirstenosa

    (@kirstenosa)

    3 years, 4 months ago

    Thanks. It would be helpful if that option was synced with WordPress “Anyone can Register”. Do you have any plans to do that?

    Plugin Author gVectors Team

    (@gvectors-team)

    3 years, 4 months ago

    Believe me it’ll be a nightmare.

    in most cases, people install wpForo to let visitors to register and open new topics. BUT…

    All forums will be closed to new users, because of the website’s administrators have disabled the WordPress user registration option and forgotten about that. This is a very popular case and this is the only reason why we’ve added a separate option to enable user registration for the forum.

    There are thousands of website that the user registration is turned off, and they don’t even remember it. They install wpForo and open new support topics asking why they don’t get new users and the forum is not growing…

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘New user registration despite option turned off’ is closed to new replies.