RE: Strangers can open new account form though account creation is disabled

Florian Quadt, modified 4 Years ago. New Member Post: 1 Join Date: 3/18/21 Recent Posts

Hello,

on our Liferay Platform (Liferay CE Portal 7.3.5 CE GA6) we have unchecked the option "Allow strangers to create accounts" (in Liferay Control Panel/Configuration/Instance Settings/User Authentication).

Nevertheless a stranger can open the account creation form by using this URL:

https://liferay-domain/web/guest/search?p_p_id=com_liferay_login_web_portlet_LoginPortlet&p_p_lifecycle=0&p_p_state=maximized&p_p_mode=view&saveLastPath=false&_com_liferay_login_web_portlet_LoginPortlet_mvcRenderCommandName=%2Flogin%2Fcreate_account

The form does not work (after the form has been submitted, no user is created and an error message is displayed instead).

Is it possible to completely hide the account creation form for strangers?

Any help is very much appreciated.

Florian 

thumbnail
Sushil Patidar, modified 4 Years ago. Expert Posts: 467 Join Date: 10/31/11 Recent Posts

Hi,

 

One approach is to block/redirect the url from web server or check by using filter.

 

Regards