Support » Plugin: Register Plus Redux » [Plugin: Register Plus Redux] User can register without confirmation of his account

  • Resolved Dmytro

    (@azzepis)


    I register a new account. When I need just use “lost password” function (and don’t need confirm my email!), and wordpress sends me my “temporary” login and link to set a new password. So, now I can login to blog without activation of my account.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author radiok

    (@radiok)

    That’s an interesting loophole, in reality that does confirm the email, since it will send your information to your email on file and you wouldn’t be able to login if that weren’t a legitimate email address! However, that’s very undesirable, for 1 we don’t want people actually using those temp logins, and for another, if they do use them for more than the grace period without actually verified they will just be purged. I’ll look into closing this loophole immediately.

    thanks

    Plugin Author radiok

    (@radiok)

    I patched this hole today, this issue is resolved in version 3.6.17

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘[Plugin: Register Plus Redux] User can register without confirmation of his account’ is closed to new replies.