Ultimate Mamber can bypass password by going to url

Hi @billreich

Is your theme a custom one by You or is it purchased from a third-party developer?

If purchased from other developers, please contact them to provide a filter hook to disable the comment section to hide for non-logged-in users.

Regards,

Thank you for your reply
I am using the X-Theme by Themeco
It is not just the comments page. They can get to any page using the url. From there they can use the menu to go to any other page.

So, I would like to block all pages from being accessed by the URL.

Shouldn’t this be a part of Ultimate Member? I looked for it but cannot find such a think. I also looked through the list of Shortcodes (which I do not know how to use but will find out if need be) but nothing seemed to match this.

Unless you know of something else, instead of contacting Themeco, I will put a php script that will pass a parameter from the Login page “submit”. All the other pages will look for this parameter in the $_POST array and decide whether to let them in based on the presence of this parameter. If there is no array(they did not come from the login page or other page on the site) then I will not let them in either. Does this sound ok?

Do you know of anything in Ultimate Member that will add to the data sent by all the submit buttons so I do not need to do each submit button separately?

Thank you
Bill

• This reply was modified 3 years, 11 months ago by billreich.

I found an Ultimate Member shortcode on the Ultimate Member site under Core Shortcodes.
It says it hides the content of the page if the user is not logged in. This is exactly what I want it to do but it does not work

It only hides the menu but leaves the rest of the page visible.

This is the first time I am using a shortcodes. Based on what I read, to install it, I went to edit the page, clicked to add a new block. Entered the word short in the search box and selected the shortcode icon. I pasted in my shortcode and clicked on Update.

Like I said, it does not work. The shortcode only hides the page’s menu. The rest of the page is visible.

Do you have any suggestions?
Thank you
Bill

Hi @billreich

You can set your site to be accessible by logged-in users only globally in the WP – Admin > Ultimate Member > Settings > Access. And then you can also exclude URLs that don’t require login.

In this way, all posts are restricted using the above settings and all non-logged in users will be redirected to the login page when they access a restricted page.

Regards,

Thank you very much.
This works great
I have to figure out how to better find things in this documentaton. I spent a lot of time trying to find this information but did not see this. I did find the shortcode that I described above but this is a perfect solution.

Thanks again
Bill

Hi @billreich

Thanks for letting us know. I am closing this thread now.

Regards,