• Hello, the plugin works great except I’m perplexed by the fact that it allows anyone to register as a new user using the login screen. I expected the login to fail if the email address has not already been registered but it simply creates a new user. Doesn’t the plugin check to make sure the email address exists in the user records and if not, deny entry? I have social login enabled for the login form and comments but not the registration form because I do not want to allow public registration. This is multisite and I have registration disabled at the network level.

    An example would be if User A has an email of [email protected] but wants to log in with Facebook. A new user is created for them using their Facebook email address such as [email protected]. So now User A has 2 different user accounts. If the email address doesn’t match an existing user’s email address, the login should fail. Or include a checkbox setting that either allows or denies registering users.

    Any help is greatly appreciated! Thanks

Viewing 3 replies - 1 through 3 (of 3 total)
  • Hi there,

    Thank you for writing in.
    I would like to inform you that,
    In this plugins, you can log in into the site If you have already account on that site.
    If you do not have any account then you can create your account and you can log in to the site.

    And for the multisite login, your requirement will be considered in the next future plugins update.

    Thank You!!

    Thread Starter InHouse

    (@inhouse)

    This is a security issue. The plugin should honor the public registration setting. I’m going to have to switch to a different plugin.

    I would like to second this. When the registration option is disabled, users are still able to register with this plugin. Is there a filter or a hook we can use to check users and make a decision on whether we should let the system register them?

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Prevent Registering Unknown Users’ is closed to new replies.