Activation link is expired

  • I have used UM for a couple of sites and both suffer from an issue with the activation link feature. For some users, when they click the link, they get a “this activation link is expired or have already been used” error, and can’t proceed.

    This seems to be a a problem others have faced, and I think it may be to do with some email systems (Office 365 for example) visiting the link to check for malware etc, and ‘activating’ the account in the process. When the user clicks the link, the account is already activated and they get an error.

    If this is the case and the feature is being used to ensure the email owner is genuine, there is a potential security risk here, as the activation is being achieved automatically.

    How do we resolve this, as it’s a fairly fundamental feature for user management.

    Thank you.

    • This topic was modified 2 years, 3 months ago by nickwilmot.
Viewing 7 replies - 1 through 7 (of 7 total)

  • @nickwilmot

    You can look at this solution to your issue:

    https://github.com/MissVeronica/um-landing-page-for-email-links

    Thread Starter nickwilmot

    (@nickwilmot)

    Thank you for your fast response @missveronicatv! I think I had actually seen this as a potential work around a while back, now you’ve shared it with me.

    It strikes me as something that needs to be integrated and maintained as part of the plugin core, rather than relying on a third-party solution, given the implications of this feature on account security for site not using your workaround.

    Have you had any interactions with the UM developers on this issue?

    @nickwilmot

    All interactions if any are official and made public at the GitHub repositories.

    Thread Starter nickwilmot

    (@nickwilmot)

    OK, it doesn’t seem to be getting much attention on GitHub from what I can see.

    I might see if the client is able to renew their expired subscription and request some official support. Are they responsive to support requests from paying customers?

    @nickwilmot

    This is the page they must go to for renewal and technical support

    https://ultimatemember.com/support/ticket/

    Thread Starter nickwilmot

    (@nickwilmot)

    Thanks, I have asked the question. They did originally have a subscription but let it lapse due to not needing any of the premium features. I also realised I had previously commented on your GitHub thread!

    • This reply was modified 2 years, 3 months ago by nickwilmot.

    Hi, I have the same problem. When the users are registered and they click over the confirmation link, the link is expired.
    I would like to know nickwilmot if you have been contacted by a member of Ultimate Member plugin or you are still waiting for a reply.

Viewing 7 replies - 1 through 7 (of 7 total)
  • The topic ‘Activation link is expired’ is closed to new replies.