bbPress creates a back door
From what I can tell, *anyone* can register for an account to your BuddyPress site if they navigate directly to the directory where bbPress lives. This is even if you have “Allow new registrations” disabled in your WPMU site admin. Apparently bbPress doesn’t have a way to turn off new registrations (or at least I am not seeing it).
I’ve tried password protecting the forum directory, but that breaks forums.
I’ve read about hacks to disable registrations, but I fear that also will break the forums. (though, for the record, I’m not against implementing hacks.)
You must be logged in to reply to this topic.