BUG when logging in with email address

  • Resolved celerystix

    (@celerystix)


    4 years, 6 months ago

    Hello,

    When the Ultimate Member plugin is activated, when i try to log in with an email address and an incorrect password, i get the error message that the user is not in the system. The plugin in is overwriting the WordPress default error messages for incorrect password in this scenario.

    This does not happen when i deactivate the plugin or when i log in with a username, i will get the error message that the password is incorrect.

Viewing 9 replies - 1 through 9 (of 9 total)
  • Plugin Contributor Champ Camba

    (@champsupertramp)

    Hi @celerystix

    Could you please clarify which login form were you using? Is it the UM /login/ page or /wp-admin/wp-login.php?

    Regards,

    Thread Starter celerystix

    (@celerystix)

    Hello @champsupertramp,

    I am using the WordPress login form /wp-admin/wp-login.php

    Thank you

    Thread Starter celerystix

    (@celerystix)

    Hi @champsupertramp,

    Any update on this?

    Thanks

    Plugin Contributor Champ Camba

    (@champsupertramp)

    Hi @celerystix

    Could you please tell us what version of the UM plugin you’re using on your site?

    Regards,

    Thread Starter celerystix

    (@celerystix)

    Hi @champsupertramp,

    I am using Ultimate Member version 2.1.4, but I also experienced the same issue using the latest version of the plugin version 2.1.5.

    Plugin Contributor Champ Camba

    (@champsupertramp)

    Hi @celerystix

    Are you able to provide a video clip so we can see the issue and we’ll try to reproduce it on our end?

    Regards,

    Thread Starter celerystix

    (@celerystix)

    Hi @champsupertramp, I can provide screenshots if an email is provided. Here is some more details in order to reproduce on your end.

    I am using the plugin for the registration form only.

    In both of the scenarios below, they should display the same error message that the password is incorrect.

    With the plugin activated,

    Incorrect Behavior:
    If a user logs into /wp-admin.php with their correct email address but incorrect password, the error message states “ERROR: This user is not in our system. New User? Register here with that email address.”

    Correct Behavior:
    If a user logs into /wp-admin.php with their correct username but incorrect password, the error message states “ERROR: The password you entered is incorrect.”

    • This reply was modified 4 years, 6 months ago by celerystix.
    Plugin Contributor Champ Camba

    (@champsupertramp)

    Hi @celerystix

    Unfortunately, UM doesn’t change the error message in the WP Login screen. Also, I recommend that you keep your login form to not display if the password or username is wrong as this could potentially hint the access credentials by attackers of your site.

    Regards,

    Thread Starter celerystix

    (@celerystix)

    Hi @champsupertramp,

    Thanks for your help.

    The UM plugin seems to interfere with the error message in the WP Login screen though, not being able to read the ‘invalid_email’ error code.

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘BUG when logging in with email address’ is closed to new replies.