Why does woocommerce allow users to change their email addresses?

  • Resolved zer0sn0t

    (@zer0sn0t)


    4 years, 5 months ago

    Even wordpress doesn’t allow this. This feels like a security issue. WordPress blocks edits to the email field by default. But wc still allows a user to bypass that restriction.

Viewing 1 replies (of 1 total)
  • Luminus Alabi

    (@luminus)

    Automattic Happiness Engineer

    Hi @zer0sn0t,

    A customer should be able to change their email address for all sorts of legitimate reasons if they have the password to the account.

    The customer also receives an email to let them know that the email address on their account was changed including what address it was changed to and they’re asked to contact the site admin if they didn’t authorise the change.

    If you want to prevent customers from doing so, you can implement custom code on your end.

    This tutorial on how to stop customers from changing addresses is a great starting point – https://www.skyverge.com/blog/stop-woocommerce-customers-editing-addresses/

Viewing 1 replies (of 1 total)
  • The topic ‘Why does woocommerce allow users to change their email addresses?’ is closed to new replies.