1
vote
SureMembers – Make Auto Login Compatable
Can we make the Auto Login function within WPFusion work with SureMembers to unlock plugin access? The possibility would be more powerful user access to online courses. Perhaps the Auto Login can be made to work with other membership/content restriction plugins as well.
Declined
Category: Core Feature Enhancements
Devyn Brugge shared this idea
Updated: November 29, 2023
Devyn Brugge shared this idea
Updated: November 29, 2023
For security reasons, auto-login only works for WP Fusion’s access control.
For example, if we extended it to SureMembers, then someone could in theory guess the auto-login URL, log in to your own admin user account, and change your admin password via the SureMembers profile.
We don’t want to be responsible for securing a system like that, so it only works with WPF.
However, if you understand the risks and want to let real users log in with a link, we have a snippet at https://wpfusion.com/documentation/tutorials/auto-login-links/#true-auto-login
Understood! I know there would be security issues, but it sounds much more serious than I suspected. Still, it’s somewhat common for users to ask for a simple way to get into their “account”, which for us typically means a LearnDash course or GiveWP Donor Dashboard, to view the content without having to log in. Even logging in with a one-time code is too complex for these users. I wish there were a solution. I will look at the snippet. Thanks again.
I think the proper way to do it is having an expiring link. For example Magic Links https://www.wpbeginner.com/plugins/how-to-add-passwordless-login-in-wordpress-with-magic-links/
In that case the request it, it arrives via email, and it’s only valid for a few minutes. That’s pretty secure since not just anyone can guess at the login link, at any time.