MyNew Registration Lockdown
·
Blocks unauthorized WordPress user creation at the shared insertion layer while preserving approved administrator and WP-CLI workflows.
MyNew Registration Lockdown enforces one centralized user-creation policy across WordPress. Instead of relying only on the public registration setting or a visible form, it evaluates user creation at the shared wp_insert_user() insertion layer.
The default policy blocks unauthorized account creation while allowing:
- Logged-in administrators with the
create_userscapability inside wp-admin. - WP-CLI user creation by a server operator.
- Explicitly authorized integrations through the documented
mnrl_is_user_creation_authorizedfilter.
The plugin also disables the default registration action, can disable multisite signups, records privacy-aware audit events, retains those events for a configurable period, and can send threshold-based email alerts.
No telemetry is collected. The plugin does not contact MyNew Technologies or any third-party service.
Documentation and support: https://mynewtechnologies.com/products/registration-firewall/
