Changing the email address doesn't require verification

Hello,

When “require email verification” is enabled, users have to verify their email to access their account. This functions like normal. The enormous flaw is once their account is activated, they can change their email address in their settings WITHOUT having to verify the new email.

How do I make it so that another verification email is sent and has to be accepted before the email in their settings is changed?

Thank you,
Andrew

Thanks for reporting this issue, we added it to the bug tracker and it’ll be fixed in the HivePress core as soon as possible.

Hello,

I’m glad it’ll be resolved soon, as it can be very problematic. Do you have a way to disable front-end editing in the settings for users in the meantime? And when you add it to Hivepress Core, it would be great if we’re able to override the email that is sent in the Hivepress settings.

Thank you,
Andrew

Please try this PHP snippet to disable front-end editing of the email field

add_filter(
	'hivepress/v1/forms/user_update',
	function( $form ) {
		if(isset($form['fields']['email'])){
			$form['fields']['email']['disabled'] = true;	
		}

		return $form;
	}
);

Hello,

That worked perfectly.

Thank you,
Andrew

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.