Support » Plugin: Wordfence Security - Firewall & Malware Scan » Wordfence and Woocommerce Prevent admin username registration

  • Resolved bredurham

    (@bredurham)


    Wordfence setting that is checked on: Prevent users registering ‘admin’ username if it doesn’t exist

    Woocommerce Settings->Accounts & Privacy->Account Creation checked on: When creating an account, automatically generate an account username for the customer based on their name, surname or email

    If a Woocommerce customer’s email is admin@something.com, will wordfence block the use of admin as a username even though the Woocommerce setting listed above is turned on?

    I am seeing a woocomerce customer with a username of admin and their email is admin@something.com We want to prevent the use of admin as a username even if a customer is created with Woocommerce.

Viewing 1 replies (of 1 total)
  • Plugin Support wfpeter

    (@wfpeter)

    Hi @bredurham thanks for your question.

    Wordfence will prevent any WordPress user creation that matches your rules around those, but I don’t think you have reason to be concerned here.

    Supposing ‘admin’ was already a valid user that you use to sign in to WordPress, Woocommerce would have to find a way around creating a non-unique username by trying some alternatives so that it can complete the operation.

    I’m unable to find any solid documentation on how Woocommerce attempts username creation if it hits a problem along the way, but I can only assume that “based on their name, surname or email” it finds a way to combine their names/email/random characters until it finds a unique username.

    Thanks,

    Peter.

Viewing 1 replies (of 1 total)
  • The topic ‘Wordfence and Woocommerce Prevent admin username registration’ is closed to new replies.