Create new account problem

[Gujaratmobile2]

When someone is creating a new account after entering their mail id they are directly getting logged in to the account without asking for password.
These means that anybody can access anybody account with only mail id while creating account.

[Billy Nguyen]

Hi you,

When you create an account with email for the first time, a password will be automatically generated and sent via the registration email (you need to set up SMTP to automatically send emails when you sign up)

Once registration is complete, you will have to enter your password to be able to log in. In the case like you said, just enter the email or login id in the registration form, then the system will report an error that the email or id already exists and you will not be able to login anymore.

You can check with any email with these 2 steps:
1. Register an account with that email
2. Log out and enter your email address in the registration again to log in

[Gujaratmobile2]

But is it okay that anyone can register and then directly get logged in without password

[Billy Nguyen]

Hi,

This is the default function of woocommerce, you can go to the config section of woocommerce (account tab) to turn off the automatic password generation function or customize the registration form: https://woocommerce.com/products/custom-user-registration-fields-for-woocommerce/

[Author]

Posts