Login username / email
I have noticed that it is possible for a user to login using the websiteMembership plugin with either their username or their email address. Is it possible to change this so that only their username is accepted?
I actually want to use email addresses values as usernames for most users but I will assign the email address value to username when the user registers.
Do I need to change any of the SQL?
`"SELECT `username`, `password` FROM `$accountsTable` WHERE password IN (?,?) AND ? IN (`username`,`email`)"`
`"SELECT `username`, `password` FROM `$accountsTable` WHERE password IN (?,?) AND ? IN (`username`)"`
A couple options:
- We don't support just checking one field, but you could modify the code as you suggest. If you do so I'd recommend creating a text file called _CUSTOM_CHANGES_.txt in the plugins directory that details your changes so they can be recreated when/if you upgrade the plugin
- If it's working as is, you can also just leave that functionality in there. If the users can't set a username then they won't be able to login with it.
Hope that helps, let me know any questions.
If you're using Website Membership, then on the signup and edit profile pages check for this setting and make sure it's set to true:
$useUsernames = true; // Set this to false to disallow usernames, email will be used as username instead