All In One WP Security And Firewall User Registration helps you setup the following options manual approval, registration captcha and much more.
Last Updated: October 23, 2020
Latest News: Updated the documentation.
Some of you might allow people to register in your site via the front-end. If that is the case then you probably want to control and minimize spam registration. The following feature allows you to manually control who registers into your site. All new registration will automatically be set to “pending” until the administrator activates it.
You can view all newly registered accounts via the table below. This also allows you to perform a bulk activation or deactivation or deletion tasks for all or each account.
What you need:
All In One WP Security And Firewall User Registration
Step 1 ) Go to WP Security -> User Registration admin tab as illustrated in the image below.
Step 2 ) The following image User Registration allows you to set up the following security settings.
User Registration Options
- Manual Approval
- Registration Captcha
- Registration Honeypot
Manual Approval
Step 3 ) Go to WP Security -> User Registration -> Manual Approval and enable Manual approval of new registration. Once you have set up this feature click on Save Settings.
Extra Features:
- Added ability to identify IP addresses during user registration and option to block selected IPs.
This will add another 20 points score towards your security meter. (Basic Security Level)
Troubleshooting
Q1 When “Enable manual approval of new registrations” is enabled and I am locked out, I cannot create a new admin user without the approval from the old admin (which is not possible). I want to approve the new user either through the Database or through the wp.cli command.
Answer: You can approve the relevant user via the DB. Follow these steps.
– Using PHPMyAdmin or similar, look inside the “usermeta” table and find the row for the user_id you are interested and where meta_key is equal to “aiowps_account_status“.
– When you find the row, set meta_value to approved.
===============
Q2 What happens if I select and delete all these extra submissions? will their unapproved user account get deleted from the user area?
Answer: Yes.
===============
Q3 When the admin goes into the moderation queue and approves someone, the new user gets an email which simply says “Your account with username: [MyUserName] is now active”.
Is there a hook which allows you to change the default e-mail text?
Answer: Yes, there are a couple of filters which deal with the email subject and the email text body. Check the following forum post for more information.
FAQ
Q1 Is there any functions or filters that can trigger user approval programmatically? This is to alter the Login for plugins like VIPPS “A Norwegian Banking application” plugin etc.
Answer: Yes there is. Check the following forum post for more information.
===============
=================================
Registration Captcha
Step 4 ) Go to WP Security -> User Registration -> Registration Captcha and enable Enable Captcha On Registration Page. Once you have set up this feature click on Save Settings.
This will add another 20 points score towards your security meter. (Basic Security Level)
Registration Honeypot
Step 5 ) Go to WP Security -> User Registration -> Registration Honeypot and enable Enable Honeypot On Registration Page. Once you have set up this feature click on Save Settings.
This will add another 10 points score towards your security meter. (Intermediate Security Level)
I hope the above information helps you protect your site from spam and bogus registrations.
Click on the following link Database Security to continue configuring the plugins settings.
If you have any questions please let me know
Enjoy.
All In One WP Security & Firewall Plugin Tutorial List
How not a dumb question but when this Manual approval of new registration is active will the admin (as I’m the only user) receive an email to approve anyone that that want’s to register? As my site is being hacked and someone is changing my ” example user name 353535 pw ###000### administrator email address” as when I try to login my password doesn’t work.
I have to go to cPanel MySQL and change my user name email address from hackers back to mine, then go back to site and request lost password to get new password to sign in.? How do I stop anyone from login in to site except me? Thanks
Hi Len, have you enabled any of the Brute Force features for example Rename Login Page? In regards to Manual Approval you should receive a notification from your website letting you know that someone has registered.