Blank New Member Request Admin Notifications

Is the template info you mention the “( ) would like to become a member of your website, to accept or reject their request please go to https://www.mysite.org/wp-admin /admin.php?page=bp_registration_options_member_requests” part?

It kind of sounds like the email sending is getting triggered some other way, given the complete lack of actual user information present.

What version of BP and our registration options plugin are you using? What other plugins?

Thanks for the quick response.

Yes the “template” I’m referring to is the standard notification text. The ( ) is exactly what we receive in the email, there is no member name or email address in the notification.

Website is https://www.scisfc.org

We had problems with multiple sploggers, so we’ve done our best to protect the site. BP Registration Options was one of those measures. Does bbPress cause issues? It could be a splogger attempt, blocked by WangGuard, but the notification is still processed with empty user info?

Versions:

BP Version 1.9.1
BP Registration Options 4.1.3
Better WP Security 3.6.3
WangGuard 1.5.10

bbPress shouldn’t because we don’t have that tight knit support for it right now, it’s still pending in my todo list for the plugin.

Our plugin has 2 places that it’ll send out an email, in the version you have. First is the admin email, second is the user and if they got accepted/denied.

user email only runs within the admin and the admin_init hook, and doesn’t use the template you mention, so we know it’s the other one.

I’m curious if something is triggering the bp_core_activate_account hook, and it’s getting past our if statements before resulting in an empty user. At this point below, there’s nothing to query and fetch for.

//email admin about new member request
$user = get_userdata( $user_id );
$user_name = $user->user_login;
$user_email = $user->user_email;
$mod_email = $user_name . ' ( ' . $user_email . ' ) ' . __( 'would like to become a member of your website, to accept or reject their request please go to ', 'bp-registration-options') . admin_url( '/admin.php?page=bp_registration_options_member_requests' );
$admin_email = get_bloginfo( 'admin_email' );
wp_mail( $admin_email, __( 'New Member Request', 'bp-registration-options' ), $mod_email );

It’s almost like one of the other plugins you have is deleting the user before our plugin can finish.

That said, if you’re willing to let it run for a bit this way, see how the emails turn out with WangGuard turned off. I don’t believe it’s Better WP Security in this case. Just let it go for half a day or so and see if BP Registration Option emails start coming in with actual user info.

I’ve turned WangGuard off temporarily to measure the result. I’ll follow up after we have some data.

Thanks again for the support. I’ll let you know our findings.

Confirmed, we turned off WangGuard and we are seeing the member name and email in the notification template. These are sploggers so WangGuard must have been blocking their attempt, but was still triggering the notifications.

Any thoughts on how the two could work together? We could leave it running, recognizing that empty requests are spammers, but my client prefers to see the names to be sure it’s not a valid request.

I’m going to add a CAPTCHA to the registration page and measure results to see if we can reduce these.

You’re plug in is great, because prior to this, sploggers were getting access to the site and creating groups and posts. At least this way we can reject them before they are an issue.

We notice on the Approve members page that it states:

Coming soon: If you Ban a member they will not receive an email and will not be able to try to join again.

This would be really helpful because we are getting multiple attempts by the same address.

Thanks for your help, I look forward to your feedback.

Good to know that we pinpointed the issue. Now to come up with a possible solution. I’ll give it some good thought and see what comes to mind.

Curious if WangGuard has any actions that I can tap into with their deleting. It’s a possibility. I’ll file an enhancement ticket on GitHub for myself.

Banning is still something that is desired but not fully tested and finished. Part of why I grayed out the button, last I checked. It’ll just do nothing still.

Michael Beckwith, I have been having the same problem. I have been getting a LOT of spammers, so I took extra measures on top of BP Registration Options (I have the latest version of both the options plugin and Buddypress) by using All In One WP Security plugin as well. I will try and turn it off to see what happens. Just wanted to let you know that I too am getting the same kind of email notifications of registration as cmconline247. Thanks!

@interglobalmedia: If you require assistance then, as per the Forum Welcome, please post your own topic.

This topic references an old version of WordPress.

Sorry about that! I’ll start a new topic.

In case you see this Esmi, I would have been fine with the continuation of this thread ??