• Resolved Nyhm

    (@nyhm)


    I like your Secure Invites plugin, but the “registration security” behavior could be improved. When registration is denied, you call wp_die() to stop the processing. This (by default) issues an HTTP 500 Internal Server Error. Anyone monitoring logs will get false-positives that something is broken.

    This is not an error condition, but a policy decision. At least, use the optional wp_die() response argument to signal a non-error code (maybe 403 Forbidden).

    In addition, consider including the backlink argument to allow users to browse back to the site homepage.

    Also, I’d really like to be able to style the failure page, but this is difficult with the current approach.

    Thanks for this nice plugin.

    https://www.ads-software.com/extend/plugins/wordpress-mu-secure-invites/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Chris Taylor

    (@mrwiblog)

    Thanks for these suggestions. I’ve just released a version which responds with a 403 code if the user cannot sign up, and the back link is now there.

    A future version of the plugin may allow you to style the failure page, but I can’t say if or when that will happen.

    Thread Starter Nyhm

    (@nyhm)

    Thanks for your responsiveness to this. I think 403 will be much “friendlier.”

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘[Plugin: Secure Invites] Plugin generates false 500 errors’ is closed to new replies.