• flymike

    (@flymike)


    At 10.21, when selecting “Your Subscriptions” as a WP admin, I could append “&email=” to the URL and change subscriptions for any registered subscriber.
    After upgrading to 10.22.1 this no longer works.
    Looking at the code, it seems like some form should be presented, allowing the WP admin to select a user to make changes on behalf of. But no such form is visible under “Your Notification Settings”.
    Is this deliberate?
    It was a useful feature that allowed a WP admin to make subscription changes on behalf of a registered user.

Viewing 1 replies (of 1 total)
  • @flymike

    It should still work but older versions had a security hole that allowed anyone with admin access to change another users subscription if they could guess the email address.

    Now, you can access this screen from Subscribe2 > Subscribers, under the Registered Users tab, and click the ‘edit’ button below the required email address.

Viewing 1 replies (of 1 total)
  • The topic ‘Your Subscriptions (as admin) – changed after 10.21’ is closed to new replies.