Anyone can register Settings hides the sign-up link from login page, it doesn't registration and bots can continue to create users programatically..
Anyone can register and the only way to add new users will be from Dashboard, being logged in with account having the capability, by going to Users > Add new..
If you managed to lock yourself out of the area and trying to create user with role by uploading and executing php file on your server, this plugin will block the attempt.
You will need to rename or delete the folder of this plugin to be able to add users from scripts without being logged in into account having the create users capability..
Install the plugin from WP repository or upload it to the wp-content plugins directory of your website..
As soon as I learn about new ways of creating users WordPress from outside Dashboard I will find way to block it and update the plugin..
Needless to say, if you chance upon such method, I would be grateful to receive the script file you believe was responsible for creating user, even if it looks like nonsense at first glance...
From my point of view, the only security measure to disable unauthorised registration is by not allowing it for any script that is not logged in with account having the create users capability..
'Anyone can register is not checked, DUR is activated yet I keep being notified of new users.
Browse the code, check out SVN repository, or subscribe to the development log by RSS...
Read more
Related items:
