Change E-Mail (and PW) in User Profile
Not sure if i´ve got something wrong, but it seems users are not able to change their E-Mail Adress in their profile settings.
From my experience this is something Community members do more often than expected. People loose access to E-Mail or just change them and want to change them in their settings as well. (I even would love to do this myself here :))
Would be very much needed. (Or i need guidance if its my settings that permit E-Mail change right now. Thanks)
Christian Anderl Yes. Currently it is not possible to change user email directly in the fCommunity User Profile but I am also looking for an easy way to do it.
PS. The email address is global for the whole WP so we could find a workaround but this us not the case I guess
Mat i think this option shouldnt be something that needs a workaround. For me at least this is a fundamental need in any Community Tool. So fundamental, that i played around for a week now, setup everything around 90% and only found out right now that this is not possible :) Tbh this would be a dealbreaker to me with 18k Users in our Community i dont want to rely on workarounds or make it a support job to change users E-Mail Adresses if they request so :)
Also the E-Mail is not used as WP Username. I can easily change it in the WP Profile and it appears in the FC Profile. So i don´t see the point why its not possible to change it in the Profile.
Christian Anderl 100% agree.
I hope that email change and username change process will be a complex process where the user either needs to confirm new email (email link) or needs to provide the user password.
Currently if a user will forward any email notification to other user, that new user can just click the magic link from that forwarded email notification and can change the other user name (if enabled by Admin) without the need of confirming that change with a password.
Changing email directly in wp-admin is a more complex process other than just entering a new email or in some cases changing the user name.
Here we don't have the change management complex process implemented yet IMHO.
Mat ah ok, so the login-link is the problem. Makes sense. Let´s see what Shahjahan Jewel and the team will say. Can´t imagine they don´t have this on their plate :)
Christian Anderl it would be good to mitigate the possible vector attack especially when it comes to the core WP entities: user names and emails. Password and email confirmation is a must in this case.
Ps. Even >100 unsuccessful magic links access within a day should be reported to the Admin just to make sure that there is no "enumeration" done against magic links.
When the user use the Magic links there could be also an email notification send on that user registered email so the real user is aware of that activity (admin could enable/disable this feature but also user could configure if the email notification is enabled - if). This way we dont have to worry that our &fcom_url_hash= secret hash is used by other users etc.
Mat 100% agree
There are also many use-cases where accounts in FC are created from external payment providers or email marketing tools. Then it shouldn't be possible for users to change their email in FC because the synchronization with the external system will break.
So if an email change function gets implemented in FC, it must be an optional feature.
To by thats true. In my case it wouldn’t matter