Disable wpforo signin, resetpassword pages

Hi @bba01,

Please follow to this instruction. First please set “No” all following options in Dashboard > Forums > Settings > Features admin page:

– Replace Registration Page URL to Forum Registration Page URL
– Replace Login Page URL to Forum Login Page URL
– Replace Reset Password Page URL to Forum Reset Password Page URL

Then navigate to Dashboard > Forums > Settings > members admin page and put your website original Login/Reg/Reset-pass page URLs in according field of “Custom Authorization URLs” option.

In any case to protect wpForo Login/Reg/Reset-pass forms please enable Built-in reCAPTCHA for only wpForo forms in Dashboard > Forums > Tools > Antispam Tab:

• This reply was modified 5 years, 2 months ago by gVectors Team.

Also, please set “No” for the “Enable User Registration” option in Dashboard > Forums > Settings > Features admin page. This will only disable forum specific registration forms and functions. The form on forum registration page will be disable. This doesn’t affect any custom registration form, as well as the default WP registration processes.

Hi and thank you for your swift reply!

I’ve done all that you say but the endpoints are still active. I don’t even want it to be possible to see the pages as that is a security risk. Is there a way of achieving this?

With best regards,

bb

Please specify what do you mean saying these:

1. “the pages as that is a security risk”, why it should by under risk? I mentioned how to secure reg/login forms and all your other security solutions are also working for wpForo Reg/Log forms, because they use the same hoks and functions as WordPress. wpForo Reg/Login forms are based on WP, those are not separate functions.

2. “the endpoints are still active” what endpoints you mean? If the “Enable User Registration” option is disabled in Features Tab, there is no way to register in forum, only WP registration is enabled.

• This reply was modified 5 years, 2 months ago by gVectors Team.

Hi and once again, thanks for your swift reply!

When I say the endpoints are working I mean you don’t get a 404 error when trying to access them (https://www.mysite/forum/?wpforo=signin). I use 2FA on certain accounts and also keep a log of the failed logins etc with the Registration Magic plugin. That’s why I don’t want them to be able to even see those pages. Is that possible?

With best regards,

bb

I have this same issue. What’s the solution please?

Please open a new support topic and explain your issues.