• Resolved hastibe

    (@hastibe)


    In Ultimate Member settings > Access > Other, there is this checkbox option:

    Only approved user Reset Password
    Enable reset password only for approved users
    This option makes possible to reset password only for approved user. Is used to prevent from any spam email attacks from not approved users.

    I don’t understand the explanation for this option. Who is an approved user and how does checking or unchecking the box make it possible or not possible for users to reset their passwords? Could you explain more about this setting?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Yurii

    (@yuriinalivaiko)

    Hello @hastibe,

    Every user has a status, it may be “Approved”, “Waiting email confirmation”, “Pending administrator review”, etc. Statuses are displayed in the “Status” column in the Users table in the admin dashboard. See example here: https://ibb.co/wN9SyNvc

    If you enable the “Only approved user Reset Password” setting, then the password reset feature will be available only for users whose status is “Approved”. Pending users can not request a password reset. This helps protect against spam attacks when a bot requests a password reset.

    Regards

    Thread Starter hastibe

    (@hastibe)

    Got it! I understand now, thanks so much for the helpful explanation. 👍

    Hi!

    That option doesn’t actually work. I have created accounts via registration that I have not approuved or that I have inactivated, and I was able to reset the password and connect to the accounts once.

    It seemes to only work when I rejected an account.

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.