• Philipp

    (@philippmuenchen)


    Hello!
    I do have a big problem with the WP-Invites Plugin and my WPMU 2.8.3 Installation! The Plugin works fine, but if I activate it, the registration-page doesn’t check wheater the username already exists.
    So someone is able to register with the same username. The effect is, that the new user overrides the original one. I need some help! Please!

    Thanks Philipp

    I forgot: https://www.ads-software.com/extend/plugins/wp-invites/

Viewing 15 replies - 1 through 15 (of 28 total)
  • I hope an answer comes soon or I may check to see if I can add a security check to the plugin. What I’ve seen is that it does not override the current user, but what is does is add a new blog to the current user. If the user exists, it will use the users same info without re-creating it. Even though the person that signed up under the username will receive an email with login details, it will not work because only the person who owns the account is able to login because it is using the user’s current info and login details.

    However, the above only occurs when a user is registering for a blog. If the user is trying to register for a username only when the username already exists, the system will stop him.

    But it would be interesting to see if it is really the plugin that is causing it, or whether this might be a bug in WPMU. If so, there needs to be a check, so that they user will have to be logged in to create a new blog.

    I just checked, and it is definitely the plugin.

    Thread Starter Philipp

    (@philippmuenchen)

    Yes! You’re right. It’s a problem of the plugin. So what could we do to solve the problem? About 100 persons got an invitation-code and now i had to close the registration until I find a solution. But I don’t know what to do now!

    So is there everyone who is abler to help us? Please!

    Greetings

    Philipp

    I sent an email to the developer. I am still waiting for a response, but in the meantime, I am trying to figure it out.

    Thread Starter Philipp

    (@philippmuenchen)

    Hello parkstreet!

    Thats very nice. I hope you’ll have success soon. Or an answer… ??
    I look forward to hear from you soon!

    Thank you!

    Thread Starter Philipp

    (@philippmuenchen)

    Hallo parkstreet!

    Do you have some news about the problem? I would like to solce it as soon as possible. It would be nice to hear from you soon!

    Philipp

    Sorry, but I have not been able to figure it out yet, and I havn’t heard back from the developer either.

    Thread Starter Philipp

    (@philippmuenchen)

    Hello!
    Thanks for you answer. Do you think that this plugin ( https://wpmudev.org/project/secure-invitations ) would work, too? I only want that the Site Admin is the only one who is able to send invites!

    Greetings

    The issue I have with that plugin is that any user can send an invitation. One user stated that away around it is to set the number of days equivalent to like 10 years or something like that.

    Thread Starter Philipp

    (@philippmuenchen)

    Oh. That’s not so nice!

    And you also don’t know another plugin? The problem is that I got 15 mail with one question: “When can I register?”. That’s why I would like to open the registration again…

    Greetings Philipp

    There’s this one, but I still don’t think it is what you are looking for. I just don’t see anything in the code that will explain why it will stop someone from registering for a current username but not stop them from registering for a blog with a current username.

    Thread Starter Philipp

    (@philippmuenchen)

    OK. Maybe this could be a solution for that time:

    Do you think I could set the configuration that only users who are logged in are able tu set up a new blog? I do use BuddyPress and the registred users should be able to find the “Make a new blog” – Link.

    If WP-Invite is able to check wheater a username exists, if they don’t create a blog. That should work?! What’s your oppinion?

    Excuse me for my horrible english. I’m writing very fast and I’m not english. ??

    Yes, that will work. Even though, they are not registering for a blog, they still need an invite code. The invite code is per user and not per blog. The invitation code sits on the user’s profile. So, when the user registers with for a username with the invitation code, once the account is activated, they will be able to create as many blogs as they need.

    Thread Starter Philipp

    (@philippmuenchen)

    no! It doesn’t work! ;(
    If I set “only registred user are able to make a blog” . the registration site shows: “You have to be logged in to make a new blog”.

    And if I activate “Only registration is allowed” WordPress don’t check wheater the uername already exists. That’s no solution… ;(

    I don’t have more idears…

    Well, this is a last resort. But you have to remember this every time you upgrade. Reset the option back to “Enabled. Blogs and user accounts can be created.” Then in wp-signup.php comment out the Gimme a blog line like so,

    <!--<input id="signupblog" type="radio" name="signup_for" value="blog" <?php echo $signup['blog'] ?> />
    <label class="checkbox" for="signupblog"><?php _e('Gimme a blog!') ?></label>-->

    Then on line 230, change it to

    $signup[ 'user' ] = 'checked="checked"';

    Now what happens is that when someone visits your signup page, they will only see the “Just a username, please” option which will be already selected because of what was changed above. Once the user activates his or her account, they will be able to create blogs from the buddypress bar because you have the Blogs and User accounts enabled.

Viewing 15 replies - 1 through 15 (of 28 total)
  • The topic ‘WP-Invite Plugin – problem’ is closed to new replies.