Title: ProfileLearning's Replies | WordPress.org

---

# ProfileLearning

  [  ](https://wordpress.org/support/users/profilelearning/)

 *   [Profile](https://wordpress.org/support/users/profilelearning/)
 *   [Topics Started](https://wordpress.org/support/users/profilelearning/topics/)
 *   [Replies Created](https://wordpress.org/support/users/profilelearning/replies/)
 *   [Reviews Written](https://wordpress.org/support/users/profilelearning/reviews/)
 *   [Topics Replied To](https://wordpress.org/support/users/profilelearning/replied-to/)
 *   [Engagements](https://wordpress.org/support/users/profilelearning/engagements/)
 *   [Favorites](https://wordpress.org/support/users/profilelearning/favorites/)

 Search replies:

## Forum Replies Created

Viewing 1 replies (of 1 total)

 *   Forum: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
   
   In reply to: [wp-login.php?action=register](https://wordpress.org/support/topic/wp-login-phpactionregister/)
 *  [ProfileLearning](https://wordpress.org/support/users/profilelearning/)
 * (@profilelearning)
 * [9 years, 1 month ago](https://wordpress.org/support/topic/wp-login-phpactionregister/#post-9043259)
 * We had the exact same thing with a number of subscriber accounts being created.
   We also had “anyone can register” enabled, but by design. We are an association
   web-site. Anyone can access the public parts of the site and post comments but
   we have the Ultimate Member plug-in installed so some pages are restricted to
   members only and you have to be logged in to access these pages. We had hoped
   to be able to allow members of the association to fill out a ‘Register’ form 
   and then have accounts created as ‘pending’ before being approved as subscribers
   which then gave them rights to access the members’ pages.
    With ‘anyone can register’
   set, the hacker bots can completely bypass the Ultimate Member plug-in and create
   accounts. We installed Wordfence and blacklisted about 100 IP addresses as the
   attacks came in. We also disabled ‘anyone can register’ and it is still disabled.
   Obviously, the attacks have stopped but we would like to find a way of allowing
   our members to register which currently would mean switching ‘anyone can register’
   back on. Any suggestions?

Viewing 1 replies (of 1 total)