Default wp-login.php?action=register still available

  • Resolved galms2013

    (@galms2013)


    2 months, 3 weeks ago

    I just installed the User Registration plug-in today. Everything is working great, except that if a user tries to login to our site via domain.com/wp-login.php, there is a link in that default wordpress login page to Register. If they click on that, they can register bypassing the User Registration form that I created.

    Is that the intended behavior? Is it possible to have that action=register redirect to the form that I created with User Registration?

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Support Sandip Pokhrel

    (@sandippokharel)

    Hi there,

    Thanks for writing in,

    You can disable the default WordPress login/registration from User Registration > Settings > General > Login Options > Disable Default WordPress Login Screen. Choose a login page and the default WP login pages will be redirected to that page. I hope this helps.

    Regards!

    Hi – thanks for a great plugin

    I have the same issue – however I don’t want to disable the default login as content creators use this to login, and the customers use my-account. The main issue is that the default registration form hook remains active for bots to abuse with spam registrations, and this should be deactivated if possible?

    Thank you

    • This reply was modified 2 months, 3 weeks ago by Darryl.R.
    Plugin Support Sandip Pokhrel

    (@sandippokharel)

    Hi @darrylr

    If you are looking for disabling just the default registration from WordPress, you can add the following code using a Code Snippet plugin.

    function disable_default_registration() {
        return false;
    }
    add_filter( 'register_users', 'disable_default_registration' );

    I hope this helps.

    Regards!

    Appreciated, thank you

Viewing 4 replies - 1 through 4 (of 4 total)
  • You must be logged in to reply to this topic.