Home Forums Plugin Support WP User Frontend Pro guest posting if guest knows some users email address this can be problem

This topic is: not resolved

This topic contains 6 replies, has 2 voices, and was last updated by  Sekander Badsha 4 years, 9 months ago.

Viewing 7 posts - 1 through 7 (of 7 total)
  • Author
    Posts
  • #23684

    Brk
    Participant
    Post count: 29

    Hi

    About guest posting:

    “If a user already exists with the same e-mail address, the post will assign to that existing user.”

    So if guest knows other users email adress guest can post anything and post will assign to that existing user .
    So guest can publish some bad posts. And if the form is on auto publish state this will be big problem .

    I think this should be disabled by some way.

    Something like; there should be error message like:

    “The email you are trying to post is exists. If you are e member plese login. Or try a different email address.”

    Can we do this with any costom code , action , modification ?

    Thanks.

    #23774

    Sekander Badsha
    Member
    Post count: 2067

    Hello Brk,
    Have you tested such issue ? I guess not.
    If you set the guest post form default to pending, guest post will not be published right away. It will stay pending in the Admin Dashboard. And the account management thing is completely done and controlled by WordPress itself. So it won't let you use same mail to another user/guest.

    #23831

    Brk
    Participant
    Post count: 29

    No i haven't tested such issue. Because i dont want to have a shy at this ๐Ÿ™‚

    Sekander, Imagine that you are a member of my site . And someone knows your email adress. And someone publishes some bad spam posts..

    Even i take guest post form default to pending, if you login to your dashboard, before site admin , you will see alot of pending spam posts in your dasboard. And i think you dont like this. May be you think there is some security problems on my site. Because someone publish posts with your account. This will be a problem.

    So in my opinion email field must be checking user emails in guest posting, if that email exists or not.
    If exists not publish. If not exists auto register and publish post will be okay.

    Thanks.

    #23885

    Sekander Badsha
    Member
    Post count: 2067

    We have tested such and can assure you, and that won't happen. For the peace of your own mind you should test too. No guest can use a registered mail.

    #23976

    Brk
    Participant
    Post count: 29

    Ok Sekander.

    Lets test together.

    Here is the link that any one can post as a guest

    http://t8.webxgo.info/?page_id=26

    And please use email adress as: sekander@wedevs.com

    This email is your registered member email in my users list.

    Anyone can post for testing.

    #24074

    Sekander Badsha
    Member
    Post count: 2067

    Sorry for Misunderstanding.
    I the thing you were assuming is right guest post and registered users post with the same email gets combined. I have notified the developer team about this issue and will get a fix next week (as we're going on a vacation from tomorrow).

    Thanks for finding such a complicated and important issue.

    #24479

    Sekander Badsha
    Member
    Post count: 2067

    I have talked to the developer team. They said this feature is intended to work this way. So according to them, its not a bug.
    But you can post the solution (ask for a feature) in our feature request forum. I'll forward that to the developer team and they may add that to the later updates.

Viewing 7 posts - 1 through 7 (of 7 total)

The topic ‘guest posting if guest knows some users email address this can be problem’ is closed to new replies.