I would prefer to use email address to login into a buddypress site as communication using @mention reveals other members usernames which can be used for brute force login attempts, but email addresses are unique and more secure except if the user decides to reveal it publicly.
Hello Tosin,
Please download the latest version of plugin and use the following code.
add_filter( 'wp_authenticate_user', function( $user ) { if ( isset( $_POST['log'] ) && ! is_email( $_POST['log'] ) ) { return new WP_Error( 'invalid_email' ); } return $user; }, 10 );
It will only allow login by email address.
Regards
RaviThanks I have changed the errors
Is it possible to make the workflow for lost password to be the user changing his password after clicking the password reset link in the mail instead of auto generated passwords.
I don’t want auto generated passwords sent to the user, but the user actually setting his own password on the login page just like how the default wp-login.php password reset workflow works.
The problem is when a user resets his password and receives a new generated password in his mail, the user will still need to login again to buddypress and change the password again in his settings to something he can remember unlike the complex generated password.
Now changing of password has now become a two stage process instead of a single stage which should occur immediately after clicking the password reset link in the mail.
Thanks
Hi Tosin,
Thank you for reporting about the reset password workflow. We are unable to provide a quick solution on this. It will be improved in our next major update.Regards
BrajeshHi Tosin,
Branded login does not use ajax to handle login. You do not need to add a loading icon. That will not make any sense as the complete page is reloaded on click without any delay.If you still want to add the loading indicator, please feel free to use any loading icon and hide them by default. Use a javascript snippet to make them visible when the button is clicked.
PS:- In future, Please start a new topic for new questions/support request. That helps us keep the support forums more organized(and searchable for others looking for the same thing).
Regards
Brajesh
You must be logged in to reply to this topic.