Notifications

Clear all

wpForo 1.x.x [Closed] Intruder signing in to wpforo without approval

Page 1 / 2 Next

Bug Reports

Last Post by dimalifragis 2 years ago

9 Posts

3 Users

0 Reactions

1,195 Views

RSS

Posts: 16

plaurits

Topic starter

Jun 28, 2022 7:26 pm

(@plaurits)

Eminent Member

Joined: 3 years ago

I wonder how I avoid user signing into to my forum in www.tisvildelunde.dk without my manual approval.

See example below, where this user “bnky” apparently managed to get in. I have blocked him now and deleted him and his posts.

Also I have now disabled XML-RPC via wordfence -> login security -> settings.

Br Peter

Details:

Activity Detail

Singapore, Singapore left https://www.tisvildelunde.dk/forum/?foro=signin&redirect_to=https%3A%2F%2Fwww.tisvildelunde.dk%2Ffor… and logged in successfully as "bnky". https://www.tisvildelunde.dk/forum/?foro=signin&redirect_to=https%3A%2F%2Fwww.tisvildelunde.dk%2Fforum%2F…

6/28/2022 7:53:55 PM (40 minutes ago)

IP: 13.214.42.163 Hostname: ec2-13-214-42-163.ap-southeast-1.compute.amazonaws.com UNBLOCK IP

Mozilla/5.0 (Windows NT 6.2; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36

Topic Tags

user approval

8 Replies

Posts: 3647

Chris

Jun 29, 2022 9:18 am

(@chris)

Famed Member

Joined: 3 years ago

Hi @plaurits,

Try this plugin for manually approving user registration in the forum.

In case you want to say thank you !)
We'd really appreciate and be thankful if you leave a good review on plugin page. This is the best way to say thank you to this project and support team.

Posts: 16

plaurits

Topic starter

Jun 29, 2022 9:33 am

(@plaurits)

Eminent Member

Joined: 3 years ago

Thanks Chris.

Which plug-in should I use instead of wpforo?

br Peter

1 Reply

dimalifragis

(@dimalifragis)

Joined: 4 years ago

Famed Member

Posts: 2615

Jun 29, 2022 9:58 am

Reply to

plaurits

@plaurits

https://wordpress.org/plugins/wp-approve-user/

https://wordpress.org/plugins/new-user-approve/

I do not use any of those, i have no idea if they work ok or not. But others do use them.

Posts: 3647

Chris

Jun 29, 2022 10:14 am

(@chris)

Famed Member

Joined: 3 years ago

@plaurits,

My bad, try this: https://wordpress.org/plugins/new-user-approve/

In case you want to say thank you !)
We'd really appreciate and be thankful if you leave a good review on plugin page. This is the best way to say thank you to this project and support team.

Posts: 16

plaurits

Topic starter

Jun 29, 2022 10:32 am

(@plaurits)

Eminent Member

Joined: 3 years ago

Ok, hope somebody will look into this bug, which the intruder used as backdoor to get in without my approval. As mentioned I think it is related to xml RPC.

1 Reply

dimalifragis

(@dimalifragis)

Joined: 4 years ago

Famed Member

Posts: 2615

Jun 29, 2022 10:35 am

Reply to

plaurits

Posted by: @plaurits

Ok, hope somebody will look into this bug, which the intruder used as backdoor to get in without my approval. As mentioned I think it is related to xml RPC.

There is no bug or backdoor or anything into wpForo.

Registrations/login/emails/RPC are all handled by Wordpress. wpForo provides just some forms for easyness.

Page 1 / 2 Next

Forum Jump:

Previous Topic

Next Topic