[ad_1]
I’m seeing a high number of people being created as WP users but the ‘anyone can register’ option is not turned on. It never has been turned on, I don’t allow public user registration. I guess someone is using the wp-login.php?action=register function, so what’s the best way to stop this?
[ad_2]
It sounds like someone might be trying to exploit the wp-login.php?action=register function to create new user accounts. Sneaky, right? Thankfully, there are a couple of steps you can take to nip this in the bud.
First off, let’s tighten up your website’s security. You can start by installing a security plugin like Wordfence or Sucuri. These plugins offer features like login protection and activity monitoring, which can help you identify and block suspicious behavior.
Next, let’s disable the registration function altogether. You can do this by adding a small snippet of code to your theme’s functions.php file. Here’s what you’ll need to add:
function disable_registration() {
return false;
}
add_filter( ‘pre_option_users_can_register’, ‘disable_registration’ );
This code effectively overrides the “anyone can register” setting and prevents users from registering via the wp-login.php?action=register URL.
Finally, keep an eye on your user list for any suspicious activity. If you notice any new accounts that shouldn’t be there, you can delete them manually or use the security plugin’s tools to block them.
By taking these steps, you should be able to put a stop to unauthorized user registrations and keep your website secure.