Project

General

Profile

Actions

Bug #15247

closed

Registration issue

Added by Matt Gold almost 3 years ago. Updated almost 3 years ago.

Status:
Resolved
Priority name:
Normal
Assignee:
Start date:
2022-02-02
Due date:
% Done:

0%

Estimated time:

Description

Hi Ray -- someone contacted us about trying to register with a hotmail.com address. I went to add them and then found that they already had an account. The registration form one finds through the homepage should be requiring people to have .edu or .org addresses. However, I'm wondering whether a plugin on a subsite, like the Event Tickets plugin on dhweek.nycdh.org, is creating accounts for users no matter what email domain they use.

Would you mind looking into this? Thanks so much.


Related issues

Related to CUNY Academic Commons - Bug #15254: Event Tickets plugin can create new user accounts and bypass BuddyPress registrationResolvedRaymond Hoh2022-02-03

Actions
Actions #2

Updated by Raymond Hoh almost 3 years ago

Hi Matt,

The registration form one finds through the homepage should be requiring people to have .edu or .org addresses.

It's not possible to register from the homepage without an .edu address. However, once a user does register with an .edu address, it's possible to change that email address to anything else afterwards on their profile's "Settings > General" page.

However, I'm wondering whether a plugin on a subsite, like the Event Tickets plugin on dhweek.nycdh.org, is creating accounts for users no matter what email domain they use.

It looks like this is the case. The RSVP functionality of the Events Tickets plugin is able to create new user accounts for any attendee of an event. It is possible to limit the RSVP functionality to logged-in users here: https://nycdh.org/dhweek/wp-admin/edit.php?page=tribe-common&tab=event-tickets&post_type=tribe_events. We should check in with Jesse to see if we should be allowing only logged-in users to RSVP or if it is intentional to open up event RSVPs to anybody.

Actions #3

Updated by Matt Gold almost 3 years ago

Hi Ray, I don't think we want to open NYCDH registration open to anyone; we put the .edu requirement in place to reduce spam, and I think we'd like to continue to ask anyone without an edu address to write to us as instructed on the registration page.

Is there a way for accounts not to be created on the site, or is requiring people to register first the only way to address this?

Actions #4

Updated by Raymond Hoh almost 3 years ago

Is there a way for accounts not to be created on the site, or is requiring people to register first the only way to address this?

As I mentioned in my previous post, it is possible to allow event RSVPs for logged-in users only. I've just done this, but you should check in with Jesse as it looks like he implemented the events functionality on the DHWeek site.

Actions #5

Updated by Raymond Hoh almost 3 years ago

  • Related to Bug #15254: Event Tickets plugin can create new user accounts and bypass BuddyPress registration added
Actions #6

Updated by Raymond Hoh almost 3 years ago

  • Status changed from Assigned to Resolved

I've found a better solution.

There is a filter to disable the creation of new WordPress users in the RSVP module. I just added the filter and made a test with a new RSVP and it does not create a WordPress user.

Going to mark as resolved.

Actions #7

Updated by Matt Gold almost 3 years ago

Oh, that is awesome!! thank you so much!!

Actions

Also available in: Atom PDF