User Registration as Administrator

  • alexvk.vk

    (@alexvkvk)


    9 years, 10 months ago

    Hi,
    I’m working with a web developer who is helping me with my site. We are both registered as administrators on the website and both have equal access to dashboard. Recently we needed another person to help us. This new person registered on the website as an administrator as well and I only had a notification that came to my email. I didn’t have to confirm that or anything.
    My question is: how could he create an account and become an administrator (meaning he has access to everything) without my consent? How can I manage it and let’s say if I delete his username in the future, can he create it again with no problem?
    Would really appreciate if someone could explain it to me. Otherwise, if people can register without my consent, I don’t really have any control over page website.
    Thanks!

Viewing 10 replies - 1 through 10 (of 10 total)
  • Randy Sandberg

    (@randywsandberg)

    9 years, 10 months ago

    When logged in to your site as an admin, when you go to Settings > General is the Anyone can register checkbox checked? Moreover, what is the selected role for Settings > General > New User Default Role? If the former is checked and the latter is Administrator then that is how ANYONE can become an admin on your site. The default settings are unchecked box and Subscriber.

    Randy Sandberg

    (@randywsandberg)

    9 years, 10 months ago

    Oh, and make sure your email address is entered in the Settings > General Email Address field!

    Thread Starter alexvk.vk

    (@alexvkvk)

    9 years, 10 months ago

    Hi Randy,
    thanks a lot for your reply. I just check led it and “Anyone can register” was unchecked. So everything is ok here. The default role was “Instructor” and I changed it now to “Subscriber” as I think Subscriber sounds like they have fewer options available (not sure).
    My personal email is entered for admin purposes.
    My first web developer is admin as well as me. Could he kind of “approved” the other one?
    What settings can set so as to be the final “consent/confirmation/vital decision” person? As far as I understand there are two administrators now and we both have equal rights I guess. And the other person could even change the email address?
    Would appreciate your help!

    Randy Sandberg

    (@randywsandberg)

    9 years, 10 months ago

    You’re welcome! And, of course, excellent news about the “Anyone can register” checkbox not being checked. Also glad to hear your personal email address is entered for admin purposes.

    As for any other admin on the system, they can indeed add any kind of user they wish. Thus, any admin on your system can indeed add other admins. Might I suggest, if this is a concern, downgrading the other admin to whatever roll most makes sense. Here is the official list of what roles can and cannot do:

    https://codex.wordpress.org/Roles_and_Capabilities.

    Hope this helps and have an AWESOME weekend!

    Thread Starter alexvk.vk

    (@alexvkvk)

    9 years, 10 months ago

    Randy, this is so helpful. Thanks a lot. I just had a look at it. What I saw was while the other people had a role assigned I don’t have one assigned. Does that make me the Super Admin? However, I haven’t seen “Super Admin” anywhere on my dashboard.
    I guess Super Admin is the one who has the most power and no one could let’s say take over my site and delete me, right?
    Thanks!! And Have a good weekend too!

    Thread Starter alexvk.vk

    (@alexvkvk)

    9 years, 9 months ago

    Now, I can’t manage my users. I tried adding and deleting a user, and I’m not able to. Don’t know what the problem could be 🙁

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    9 years, 9 months ago

    Are you sure the account you are using is an actual administrator? Do you have any plugins that may be interfering with your account?

    Thread Starter alexvk.vk

    (@alexvkvk)

    9 years, 9 months ago

    Hi Jan,
    I am an administrator. When I go to wordpress.com I can see that I am. However, when I am on dashboard I can’t see this, my role simply does’t appear. You see, I’m not a tech person and I have no idea how I am present in both wordpress.com and .org and how it all works.
    So, I don’t have any choice but have a web developer. Obviously he/she has to be an admin to manage the site. I just want to make sure that another admin would not be able to delete me or restrict access to things.
    Thanks for help! Really appreciate it.

    Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    9 years, 9 months ago

    I am an administrator.

    That’s good.

    When I go to wordpress.com-

    Wait.

    Your self-hosted site and WordPress.COM do not share information and have nothing to do with each other.

    Can you share the URL to the site in question? Please be aware that if you do share it here, it will not be deleted later. But I suspect that you may be mixing one site with the other.

    Thread Starter alexvk.vk

    (@alexvkvk)

    9 years, 9 months ago

    Hi,
    it’s just that I had a plugin which shared info with wordpress.com, don’t remember the exact name but it had “jet” in it.
    The website is http://www.lingualive.ru and now I have a problem that even though I am an admin I can’t add or delete users. And I do need to add some users.
    I wrote to dreamhost and they gave me a lot of tips and things to try. They couldn’t solve the problem though. My web developer can’t solve it either.
    I am so frustrated and don’t know what else to try.
    Any ideas why that could be happening?

Viewing 10 replies - 1 through 10 (of 10 total)

The topic ‘User Registration as Administrator’ is closed to new replies.