Geodirectory Security Question?

This topic contains 8 replies, has 3 voices, and was last updated by  Dirk 6 years, 3 months ago.

We have moved to a support ticketing system and our forums are now closed.

Open Support Ticket

Tagged: , ,

  • Author
    Posts
  • January 31, 2018 at 8:37 am #415097
    January 31, 2018 at 12:43 pm #415140

    Guust
    Moderator
    Post count: 29970

    I don’t understand …
    That is how WordPress works. Any other user can do what a subscriber can, the next level is author and anyone with a higher level can do what an author can etc.
    What is the security problem you have? What are you worried about?
    Post your URL and WP admin details in a private reply if there is anything we should look at.
    Thanks

    January 31, 2018 at 4:38 pm #415191

    Jason Gillespie
    Expired Member
    Post count: 78
    This reply has been marked as private.
    January 31, 2018 at 4:59 pm #415198

    Jason Gillespie
    Expired Member
    Post count: 78
    This reply has been marked as private.
    January 31, 2018 at 10:20 pm #415233

    Guust
    Moderator
    Post count: 29970

    Have a look at the setting at GD > General > Allow user to see wp-admin area
    Set that to no, and only admins can access wp-admin.

    Thanks

    January 31, 2018 at 10:47 pm #415237

    Jason Gillespie
    Expired Member
    Post count: 78

    That’s why I was asking this question. My dash is set already to NO. But yet I can still login as admin through Geodirectory.

    January 31, 2018 at 10:49 pm #415238

    Jason Gillespie
    Expired Member
    Post count: 78
    This reply has been marked as private.
    January 31, 2018 at 10:52 pm #415240

    Guust
    Moderator
    Post count: 29970

    That is because admin has the same privileges of a subscriber, editor and author.
    If you do not want an admin to be able to do the same things as a subscriber, you will have to change default WordPress settings, and admins will no longer be able to do those things that subscribers can.

    I do not understand why you think there is a security risk of an admin logging in from the frontend. What is the point of being an administrator then?

    February 1, 2018 at 11:33 am #415313

    Dirk
    Full Member
    Post count: 390

    @jason,

    please check wordpress codex:
    https://codex.wordpress.org/Roles_and_Capabilities

    You can also check user management plugin’s that might help here.

  • Author
    Posts
Viewing 9 posts - 1 through 9 (of 9 total)

We have moved to a support ticketing system and our forums are now closed.

Open Support Ticket