improved security, added user autocreation and manual user data sync from admin

vanilla / wordpress-vanilla

Official WordPress plugin for Vanilla Forums integration.

https://open.vanillaforums.com

GNU Lesser General Public License v3.0

17 stars 6 forks source link

improved security, added user autocreation and manual user data sync from admin #13

Closed MikhailRoot closed 8 years ago

MikhailRoot commented 8 years ago

+added option to manually update user data on vanilla in users bulk actions in wp-admin

added option to vanilla sso settings to automatically create user on vanillaForum as it registers on wordpress
added needed direct php files access checks where needed and index.php disallows to browse plugin directories.

DaazKu commented 8 years ago

The branch has conflict and the sso-create-users-on-register option does not work. Please try to respect indenting and spacing.

MikhailRoot commented 8 years ago

@DaazKu Thank you for help in making it better. i've updated it.

DaazKu commented 8 years ago

Thanks you for taking the time to update your PR. I added 2 more notes.

Could you also resolve the conflicts in your PR?

See https://help.github.com/articles/syncing-a-fork/

MikhailRoot commented 8 years ago

updated code in getting profile url, because it it's successfully got via parsing img tag, we don't need to get it again , otherwise we get it in alternate way. also updated user object checking because $cur_user->id!=='' will cause error if it's not WP_User - and this is what we really check for.

DaazKu commented 8 years ago

The point of SSO is to NOT force-sync your users so we will not merge that PR.