More on Wordpress Security

October 2nd, 2007 by Fraser

Okay, thanks to Nato’s research my church’s website now has the Disclose-Secret plugin installed, which will let me restrict posts and pages to registered users.

The only problem is, the standard user registration feature is automated - ie anyone can type their details into the rego form and get a password emailed to them by the Wordpress software. Why does this suck? Because it adds a level of complexity to the registration process. If anyone from my church actually does register, they’ll still need me to change their user permissions before they can read restricted posts and pages. Which means I’d have to try and explain this to everyone. Which I could do, but I don’t want to. It’d be much less hassle if, when someone submitted the registration form, I received an email to confirm or deny his or her registration. Then I could make the restricted posts accessible to people at ’subscriber’ level.

So… any plugin suggestions?

Posted in News and such

One Response

  1. Nato

    It’s not really a plug in, but you could change your settings so only you can register users, and set up a form on a separate page that just e-mails you, and then you manually register them, and they’ll get an e-mail that way?

Leave a Comment

Please note: Comment moderation is enabled and may delay your comment. There is no need to resubmit your comment.

Creative Commons License
This work is licensed under a Creative Commons Attribution-Noncommercial-No Derivative Works 3.0 New Zealand License. In short, this means you may copy any of my works (writing, photos etc.) posted on this site, in whole or in part, as long as you attribute me as the author; you may not modify my works, or use them for commercial purposes, without my permission. If you distribute my works, you must make the above conditions clear to any recipients. If I post anything I don't own the copyright for, I'll make this clear and attribute it appropriately.