pstenson

I fully agree with merlinx. I do know what I am doing with the website, the fault lies with the plugin. Too bad, it worked beautifully for years before this fiasco.

I had posted the details 3 days ago, but the “moderator” sent me a notice that I must start a new topic -*bizarre*- (it’s not a new topic and the developer hasn’t fixed it yet).

On top of that my message is completely deleted, and I didn’t save a copy. So, my only recourse is to delete this plugin, since there seems to be no way to deactivate 2FA.

A nasty review is my next course of action, which is a shame, since I’m not even sure the developer is seeing these comments.

My 2 sites where this plugin is being used are both auto-approving any person who registers. Yes, both are set to “Admin Approval After Registration” in both the settings and the option on the Form.
The process should be:
-Registration form is filled out by the applicant
-Applicant gets message to click on the link in the received email with the activation key (working fine)
-Applicant is “Pending” under Users
-Admin is NOT notified (this is fine)
-Applicant gets email and clicks on link to activate application
-Admin is NOW notified that the applicant needs approval (THIS is the part that’s NOT working – the applicant is moved to “approved” and the admin is informed via email after the fact. In the meantime, the applicant can now log on and has full site access)
-Admin approves applicant (or not)

Getting a tonne of unknown applicants (and now auto-approved users) from Russia and they have no business being on either of these sites. Admin (me) has to go in and un-approve each one, but they have full site access in the interim.

• This reply was modified 6 years ago by pstenson. Reason: clarified applicant access