search

wpsharks / s2member

s2Member® Framework (membership management for WordPress®).
64 stars 36 forks source link

OTP Verification: Compatibility w/ Other Plugins #920

Open kristineds opened 8 years ago

kristineds commented 8 years ago

It would be nice if OTP Verification is implemented to prevent anyone from using an email address (or SMS) that belongs to someone else when registering.

A customer reported...

The reason I feel SMS is important is that UDEMY.com (provides online courses by independent instructors) reports an increasing percentage of students accessing their courses with mobile devices. For some countries it is almost all mobile devices, like India. Here in the U.S. last year the number of mobile devices accessing the Internet exceeded land-based connections and the percentage of mobile access is expected to increase.

Is SMS essential? No, especially when speaking of mature adults; they're use to email verification. The youth market appears to have a preference for SMS and in many ways it is easier. Just makes sense to make it available.

Referencing: internal private ticket

patdumond commented 8 years ago

This is already possible with third-party plugins. s2Member relies (mostly) on WordPress Core for login and registration.

Personally, I'm a big fan of 1 plugin=1 function. Obviously, s2Member is way past that, but does it really have to incorporate every nice-to-have feature out there? We didn't even implement strong passwords - we waited for WordPress core. I say wait for WordPress Core for one-time password/2-factor authentications, whichever we are talking about here. My 2-cents. ;)

Also, how does one-time password or 2-factor authentication prevent the use of someone else's email address? Only email verification will do that.

jaswrks commented 8 years ago

I agree with @patdumond about this being best suited for another plugin. I'll leave this issue open as a request that can be considered, but my feeling is that it should be left to plugins with a focus on this sort of functionality. I'd even say that I'd rather not see this in WordPress core either; i.e., I'd rather see it supported by core as it is now, but implemented by plugins that I can choose from.

What would be very helpful in this issue would be to receive feedback from users who have reported success or failure when integrating plugins that handle this functionality in concert with s2Member and then work to eliminate any conflicts we are made aware of.

KTS915 commented 8 years ago

Personally, I'm a big fan of 1 plugin=1 function.

@patdumond: Me too! I agree 100%!

KTS915 commented 8 years ago

@kristineds: Have you tried this plugin? If you get in contact with its developers, it looks like they are interested in expanding the list of registration and login forms with which the plugin will work.