e107inc / e107

e107 Bootstrap CMS (Content Management System) v2 with PHP, MySQL, HTML5, jQuery and Twitter Bootstrap. Issue Discussion Room: https://gitter.im/e107inc/e107
https://e107.org
GNU General Public License v3.0
323 stars 213 forks source link

Membersite only - testing - is this intention #4349

Open Jimmi08 opened 3 years ago

Jimmi08 commented 3 years ago

I had fully tested 2.3.1 with the members-only setting (regarding templates)

The only weird thing I noticed was:

1. membersonly.php

2. login.php

3. social login

Why with login disabled there is still social login option?

image

Just screenshot of my settings (to be sure):

image

Thanks

tgtje commented 3 years ago

@Jimmi08 ran some thoughts.. Did similar test, i can see what you mean, yes confusing. I do believe it is intentional, keeping in mind (guessing) that a 'total' switch off could/would mean > only.for admin. Having log in redirect to admin is (imo) a no go. (security related). As for social (not implemented in my re-enactment) suggests that social settings in specific cases has to follow the switch. ( or an advanced setting on user registration part ( a switch between visitor awareness, and member only) OR giving a mere new second LAN definition that incorporates mentioning that iff no form is displayed, one is not able to enter (etc).(else iff situation) Just my thoughts on this. Could indeed need a fresh review.

Jimmi08 commented 3 years ago

Answered.

Moc commented 3 years ago

This could use some refining.