0 STARS – IT allowes BYPASS User Registration !!!
-
Wel.. the idea is nice, executing a fat 0.
I have a website where new users have to registrate themselves before they can see something about the site. Using: wp-login.php
After installing the Plugin CLEF, new users could login while they still where pending! They haven’t touched their confirmation email!
Tested myself, I was utterly amazed!!! I created a test user, filled in bogus information, clicked on send, went back to the login screen and i was able to login!!!
After disabling CLEF, the login noticed my account wasn’t activated! Confirmed the email and after then i was able to login!
How can you bring such login tool on the market while the intend to bring more security?
- The topic ‘0 STARS – IT allowes BYPASS User Registration !!!’ is closed to new replies.