OneAll plugin issue
Installation and Configuration
andrusito:Yes, my email is working. I receive the test email.
@brian, when you say (in another thread):
Quote:... if the email address already exists in JR, it;s not going to "auto log" them in (that would be a security issue). They need to enter their email and password to log in if their account already exists.
You are trying to say that OneAll plugin will not work on LOGIN function? because I think this is the main purpose of it.
If I'm already in on my Facebook account and want to login on JR5.. do I have to put in my credentials again? I mean... it is me!
Many sites are doing this. They have an auto-login if you are already in on Facebook. Where is the security risk?
Of course not - that is not what I am saying.
What I am saying is: If you have already linked your JR account to your FB account, then of course you can login. However, if you have NOT linked up your FB account to your JR account, then you will NOT be auto logged in - that is a security issue. Imagine that I am on FB (or any site supported by OneAll) and I change my email address to be YOUR address, then visit your site and am "auto logged in" as you. That's a very bad idea.
Instead, the way OneAll works is:
- if you are brand new to the JR site, then you go to "signup" and click on FB and your account is linked up.
- if you
already have an account on JR, and want to link up your FB account, you log into JR and go to Account -> Networks, and you can link your account up there.
Hope this helps!
