Bug #15247
closedRegistration issue
0%
Description
Hi Ray -- someone contacted us about trying to register with a hotmail.com address. I went to add them and then found that they already had an account. The registration form one finds through the homepage should be requiring people to have .edu or .org addresses. However, I'm wondering whether a plugin on a subsite, like the Event Tickets plugin on dhweek.nycdh.org, is creating accounts for users no matter what email domain they use.
Would you mind looking into this? Thanks so much.
Related issues
Updated by Raymond Hoh almost 3 years ago
Hi Matt,
The registration form one finds through the homepage should be requiring people to have .edu or .org addresses.
It's not possible to register from the homepage without an .edu address. However, once a user does register with an .edu address, it's possible to change that email address to anything else afterwards on their profile's "Settings > General" page.
However, I'm wondering whether a plugin on a subsite, like the Event Tickets plugin on dhweek.nycdh.org, is creating accounts for users no matter what email domain they use.
It looks like this is the case. The RSVP functionality of the Events Tickets plugin is able to create new user accounts for any attendee of an event. It is possible to limit the RSVP functionality to logged-in users here: https://nycdh.org/dhweek/wp-admin/edit.php?page=tribe-common&tab=event-tickets&post_type=tribe_events. We should check in with Jesse to see if we should be allowing only logged-in users to RSVP or if it is intentional to open up event RSVPs to anybody.
Updated by Matt Gold almost 3 years ago
Hi Ray, I don't think we want to open NYCDH registration open to anyone; we put the .edu requirement in place to reduce spam, and I think we'd like to continue to ask anyone without an edu address to write to us as instructed on the registration page.
Is there a way for accounts not to be created on the site, or is requiring people to register first the only way to address this?
Updated by Raymond Hoh almost 3 years ago
Is there a way for accounts not to be created on the site, or is requiring people to register first the only way to address this?
As I mentioned in my previous post, it is possible to allow event RSVPs for logged-in users only. I've just done this, but you should check in with Jesse as it looks like he implemented the events functionality on the DHWeek site.
Updated by Raymond Hoh almost 3 years ago
- Related to Bug #15254: Event Tickets plugin can create new user accounts and bypass BuddyPress registration added
Updated by Raymond Hoh almost 3 years ago
- Status changed from Assigned to Resolved
I've found a better solution.
There is a filter to disable the creation of new WordPress users in the RSVP module. I just added the filter and made a test with a new RSVP and it does not create a WordPress user.
Going to mark as resolved.
Updated by Matt Gold almost 3 years ago
Oh, that is awesome!! thank you so much!!