Remove members-only settings from wp-admin

  • I’ve noticed that readers who only have read and write comment permissions are able to change the “Members Only” settings. This while other settings are removed from the users view and they are unable to edit any setting. Looks like something was missed there.

    Could this please be corrected as someone might accidentally throw the site wide-open.

    https://www.ads-software.com/extend/plugins/members-only/

Viewing 1 replies (of 1 total)

  • Hi Richard,

    Change rule 98 in the plugin file:

    add_options_page('Members Only', 'Members Only', 8, basename(__FILE__), 'members_only_options_page');

    to

    add_options_page('Members Only', 'Members Only', 'manage_options', basename(__FILE__), 'members_only_options_page');

Viewing 1 replies (of 1 total)
  • The topic ‘Remove members-only settings from wp-admin’ is closed to new replies.