|
Oguzhan Altun
|
July 4, 2017 at 4:16 am
Hello,
I received a spam complaint from Mandrill. Digging into it, I see that the user received a New User Registration email from my website, even though I cannot find any registrations from this email.
After a bit more digging, I see that the system has been creating many users and sending them emails about this. Some of them are users who register to my events (which is fine, as I have the EE4 user integration enabled for almost all the events), but many of them are not registered in EE4.
I checked the messages module but it doesn’t cover the “user created” emails.
My question is that could EE4 be creating WP users if they are logged on to WordPress from another site? I have no idea why my website is creating users even if they have not registered to any event, and it seems like it all started after I installed the WP user integration.
Thanks in advance for any advice on how I can find out what’s creating these emails.
|
|
Tony
|
July 4, 2017 at 4:38 am
I checked the messages module but it doesn’t cover the “user created” emails.
New user emails are not from EE, they are from WordPress, so do not pass through the messages system and therefore are not logged in the EE Messages system.
You could install the WP Mail Logging plugin to log all emails sent from your site.
My question is that could EE4 be creating WP users if they are logged on to WordPress from another site?
I’m not sure what this means?
You’re asking if users are logging into another site will EE create a user?
If the user is not logged into you’re site and you have set EE to create users on registration then it will create a user when they register onto the event.
|
|
Oguzhan Altun
|
July 4, 2017 at 4:49 am
Hi Tony, thanks for the quick reply.
OK, I will install the WP mail logging to see if I can find out what’s happening.
So what you’re saying is that it’s not possible for EE to create WP users if the user doesn’t fill the registration form?
|
|
Tony
|
July 4, 2017 at 4:57 am
How would it generate a user with no details passed to it? I’m not being awkward when asking, I’m trying to work through what you’re suggesting.
If no details are submitted on the reg form, then EE doesn’t have details to generate a user.
|
|
Oguzhan Altun
|
July 4, 2017 at 5:01 am
sorry, i know it’s a stupid question, i’m just confused about these wp accounts. Especially since one of them reported spam.
Anyway, fingers crossed about the mail logging plugin to provide an answer.
Thank you already.
|
|
Tony
|
July 4, 2017 at 6:28 am
There are no stupid questions, its always better to ask if unsure or curious 🙂
Do you allow normal user registrations on your site? If so have you setup a reCaptcha or similar to help prevent spam registrations?
|
|
Oguzhan Altun
|
July 4, 2017 at 7:40 am
i just disabled new user registrations from WP options. Will this interfere with the WP user plugin of EE4?
|
|
Josh
|
July 4, 2017 at 12:16 pm
It could if you have an event that requires logging in to register and someone needs to open a new account before they can register.
|
