Administration approval circumvented

  • URA prevention of user login before approval can be circumvented by another plugin Super Socializer (SS).

    When a user is registred – and is awaiting administrator approval – he can login using G+/FB – if SS is installed.

    I found that another plugin WP Security (AIOWPS) has an option that also requires Administrator approval before allowing access to login.

    It has a meta_key called aiowps_account_status. If it contains the value pending it is still impossible to logon using SS.

    I’m not sure if SS has a hack that gets called during any logon that prevents a successfull login – a similar functionality would be nice in URA.

    Cheers

    P.S Let me know if I’m a P.I.A ??

Viewing 5 replies - 1 through 5 (of 5 total)
  • Plugin Author bnovotny

    (@bnovotny)

    I Will look into it. There is probably something but I am busy right now but I will try to include something in the next update.

    Thread Starter lsommerdal

    (@lsommerdal)

    No worries.
    I can circumvent it – so no need to rush ??

    Plugin Author bnovotny

    (@bnovotny)

    I think I found a fix but cannot test it yet as the Super Socializer doesn’t work on my test site. But he is using the authenticate filter to check his so i added that to an update but have no way of testing it for the time being and I don’t have time to debug some other guys plugin.

    Thread Starter lsommerdal

    (@lsommerdal)

    I have a test site where I can test it, but I won’t be able to set it up and test it until the weekend.
    If you like, I could test it – provided you send the updated plugin to me.
    You have my mail address – I think I could receive a zipped file on that

    If you would like me to follow a special procedure in testing – please let me know

    Plugin Author bnovotny

    (@bnovotny)

    Okay I will do that then. I have one ready to test, just no where to test it. I will send it to you tomorrow after I double check that the update is not throwing any errors.

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘Administration approval circumvented’ is closed to new replies.