Geodirectory Security Question?

We have moved to a support ticketing system and our forums are now closed.

Open Support Ticket

Tagged: #GeoDirectory, login, security

Author

Posts
January 31, 2018 at 8:37 am #415097

Jason Gillespie
Expired Member

Post count: 78

Geodirectory Security Question?

Is there a way to make it to where ONLY subscribers can login through any Geodirectory login?

Example – GD Login page, my account button top of page….

Geodirectory is setup out of the box where anyone, all the way up to Administrators an login through any Geodirectory login.

This defeats some of my security……

Is there something we can do, to only allow subscribers to login through Geodirectory?

Thank you

January 31, 2018 at 12:43 pm #415140

Guust
Moderator

Post count: 29970

I don’t understand …
That is how WordPress works. Any other user can do what a subscriber can, the next level is author and anyone with a higher level can do what an author can etc.
What is the security problem you have? What are you worried about?
Post your URL and WP admin details in a private reply if there is anything we should look at.
Thanks

January 31, 2018 at 4:38 pm #415191

Jason Gillespie
Expired Member

Post count: 78

This reply has been marked as private.

January 31, 2018 at 4:59 pm #415198

Jason Gillespie
Expired Member

Post count: 78

This reply has been marked as private.

January 31, 2018 at 10:20 pm #415233

Guust
Moderator

Post count: 29970

Have a look at the setting at GD > General > Allow user to see wp-admin area
Set that to no, and only admins can access wp-admin.

Thanks

January 31, 2018 at 10:47 pm #415237

Jason Gillespie
Expired Member

Post count: 78

That’s why I was asking this question. My dash is set already to NO. But yet I can still login as admin through Geodirectory.

January 31, 2018 at 10:49 pm #415238

Jason Gillespie
Expired Member

Post count: 78

This reply has been marked as private.

January 31, 2018 at 10:52 pm #415240

Guust
Moderator

Post count: 29970

That is because admin has the same privileges of a subscriber, editor and author.
If you do not want an admin to be able to do the same things as a subscriber, you will have to change default WordPress settings, and admins will no longer be able to do those things that subscribers can.

I do not understand why you think there is a security risk of an admin logging in from the frontend. What is the point of being an administrator then?

February 1, 2018 at 11:33 am #415313

Dirk
Full Member

Post count: 390

@jason,

please check wordpress codex:
https://codex.wordpress.org/Roles_and_Capabilities

You can also check user management plugin’s that might help here.
Author

Posts