I have installed wordpress in www.mysite.com/user and now suppose if someone is familiare with wordpress he/she can easily access my stuffs through www.mysite.com/user/members
www.mysite.com/user/groups etc even he can see all stuffs from www.mysite.com/user without logging in to my site.Is there any way to prevent this.something like access denied if he is not logged in or any kind of redirection to a specific url.
or something like You don’t have permission to access /members/ on this server .I am facing lots of problem because of this.I am using frisco for buddypress theme.
Add a comment
|
1 Answer
You can force all visitors to log in before they are allowed to see the pages. This will not work for attachments.
But … if that already is a problem for your site – why did you install WordPress in a publicly accessible directory? You should plan visibility first, then run the installation.
Consider HTTP Basic authentication if you think your users can handle that.
-
I tried to install Private BuddyPress.which works fine but the only problem with this plugin is it does not allow to user register.when user clicks on registration it redirects to login page.is there any way not to include registration from this redirection. Commented Dec 27, 2012 at 21:59
-
Yes, see the code in my linked answer. It does not include the registration page.– fuxia ♦Commented Dec 27, 2012 at 22:01
-
authenticator plugin is not working nor T5 Force Log In.facing the same issue again.Is there any way to get rid of this problem.can i modify wordpress.org/extend/plugins/private-buddypress to allow registration.? Commented Dec 27, 2012 at 23:01
-
@user1916876 This plugin offers an option to exclude registration pages.– fuxia ♦Commented Dec 27, 2012 at 23:07
-