Storing of user credentials questions
Quote from testuser on October 24, 2018, 3:55 pmHello.
I am interested in using your plugin but I have some questions before I install it.
Regarding my question I have found this answer of yours already:
https://asgaros.com/support/topic/where-is-the-content-stored/
But I sadly still don’t understand it fully.
Are the user registrations stored in the same database as the admins of my wordpress website?
If so, why not a different one?
Furthermore, if someone goes to “mywebsitename.com/wp-admin” and uses his forum credentials, what happens?
So, do the forum credentials only apply to the forum itself?
I hope you can help me understand this better and I am looking forward to hearing from you asap. Would really like to use your plugin!
Thanks in advance!
Hello.
I am interested in using your plugin but I have some questions before I install it.
Regarding my question I have found this answer of yours already:
https://asgaros.com/support/topic/where-is-the-content-stored/
But I sadly still don’t understand it fully.
Are the user registrations stored in the same database as the admins of my wordpress website?
If so, why not a different one?
Furthermore, if someone goes to “mywebsitename.com/wp-admin” and uses his forum credentials, what happens?
So, do the forum credentials only apply to the forum itself?
I hope you can help me understand this better and I am looking forward to hearing from you asap. Would really like to use your plugin!
Thanks in advance!
Quote from Asgaros on October 29, 2018, 6:56 amHello @testuser
Asgaros Forum is a WordPress extension so it uses the already existing user management of WordPress.
Why develop a user-management-system when we already can use an existing system which is well-developed since decades and actively maintained by the WordPress developers? Developing an own user-management-system requires to develop login-logic, registration-logic, own database-tables, synchronization-logic between the existing user-management-system because you want to use your existing WordPress administration account as well, and much more. Develop existing functionality twice leads to redundancy and the need to ensure compatibility with every new release of WordPress as well. It also brings the risk for security-issues. As you can see there are a lot of arguments against an own user-management.
It is also a common misunderstanding that the wp-admin area gives you access to the administrative functionality of your website. Normal users can only manage their profile in this area and dont have access to anything else. So there is no security risk by it of which you have to be worried about.
If you have further questions please let me know!
Hello @testuser
Asgaros Forum is a WordPress extension so it uses the already existing user management of WordPress.
Why develop a user-management-system when we already can use an existing system which is well-developed since decades and actively maintained by the WordPress developers? Developing an own user-management-system requires to develop login-logic, registration-logic, own database-tables, synchronization-logic between the existing user-management-system because you want to use your existing WordPress administration account as well, and much more. Develop existing functionality twice leads to redundancy and the need to ensure compatibility with every new release of WordPress as well. It also brings the risk for security-issues. As you can see there are a lot of arguments against an own user-management.
It is also a common misunderstanding that the wp-admin area gives you access to the administrative functionality of your website. Normal users can only manage their profile in this area and dont have access to anything else. So there is no security risk by it of which you have to be worried about.
If you have further questions please let me know!