search

fisherab / croquet-match-report

Allow users to enter results of a croquet league match
GNU General Public License v2.0
0 stars 0 forks source link

Registration process #10

Open dswarhurst opened 4 years ago

dswarhurst commented 4 years ago

When users get their account they receive an email with subject "[Croquet Club Sites] Activate username". Clicking on link generates another email to them subject "New Croquet Club Sites User: username" that contains username and plaintext password. a) This is a security exposure b) when user tries to sign into site, they get message that account is not activated. This is confusing as it leads the user to believe they were activating the account by clicking the link. it still requires an admin or league manager to manually activate the user.

fisherab commented 4 years ago

This is standard WordPress behaviour. I will see what can be done about it. I think I could at least recommend a different procedure to setup the account.

fisherab commented 4 years ago

Added milestone