• Resolved locker17

    (@locker17)


    Isn’t it a security issue if the user clicks on the approve link send by the registration form and then is automatically logged in?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Support Amrit Kumar Shrestha

    (@shresthauzwal)

    Hi @locker17,

    User Registration & Membership offers several login options for users, including auto-login after registration, admin approval, email confirmation, etc.

    If you’re using the email confirmation feature, users must click the confirmation link sent to their email to verify their account and access it. This is a security feature, not a security issue, as it ensures that only email verified users can log in.

    For more secure user logins, you can enable the admin approval option. This allows you to manually approve each registration request before users can access their account.

    Best regards!


    Thread Starter locker17

    (@locker17)

    I think this was my fault. I clicked the registration link within the email and been automatically logged in into the webpage which I dont like.
    But later I saw that I was also logged in with my admin account on the same computer at the same time. I think that’s why.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Automatically logged in after click on link’ is closed to new replies.