|
Chris Williams
|
September 9, 2015 at 11:14 am
I’m not sure why i cant post in the EE4 WP User Integration forum. I purchased the license recently and should have forum access to it?
But here is my issue:
Since installing EE4 WP User Integration v2.0.4.p, I am getting many random WordPress New User Registrations that seem to be bots. I have it set to “YES” for “Default setting for Login Required on Registration”. And “NO” for “Default setting for User Creation on Registration.” I did have the “Default role for User Creation on Registration.” set to “Subscriber” but just changed it to “Blocked”.
Not sure if that will fix my problem. I had not got any bogus registrations until installing your new plugin.
The page I have linked in the settings for the “Registration Page URL (if different from default WordPress Registration)” Links to our Login page that does not even have an option for registration there. They would need to go to our online store and purchase a subscription through our WooCommerce to go through a registration page.
My WordPress admin login/registration also uses a Captcha plugin.
Any ideas why this is happening?
|
|
Lorenzo Orlando Caum
|
September 9, 2015 at 11:22 am
Hi there Chris,
Based on what you shared, your WP User Integration is set to create accounts — however, you have reCaptcha enabled for registration checkout?
Did the bogus accounts stop after you deactivated the add-on?
—
Lorenzo
|
|
Chris Williams
|
September 9, 2015 at 11:28 am
I have it set to NO for “Default setting for User Creation on Registration.”
I have no deactivated the add-on because we really need this plugin. I have been waiting for it’s release since you came out with EE4.
“Registration Page URL (if different from default WordPress Registration)” is set to : http://lvtriclub.com/my-account/ which you can see has no registration there.
|
|
Lorenzo Orlando Caum
|
September 9, 2015 at 12:37 pm
Hi Chris, I did see that but I thought that may be a typo. If creating a new account is disabled through the add-on, then new accounts would not be created during registration checkout.
Are there any other sources of new accounts with logins on your site?
—
Lorenzo
|
|
Chris Williams
|
September 9, 2015 at 4:35 pm
The EE4 WP User Integration is the only change I have had since this issue started. It’s not a ton of new users (6) over the last 3 days. But still worrisome.
|
|
Josh
|
September 10, 2015 at 8:35 am
Hi Chris,
It might be a bot that’s hitting yoursite.com/wp-login.php?action=register, which could be a symptom of running WP users because it adds restrictions to logged out users, but not the cause. You can find out where and how they’re getting user accounts by installing a plugin like WP Security Audit Log, then view the logs after you see a new bogus user account created.
|
