Wovie
Sign in
How visitors sign in, create an account and recover their password on your site, with Google or with their email, and how the verification code and the protection against bots work.
Overview
Visitors sign in, create an account and recover their password on your Authentication page, which Dbmovies creates at /auth/. Each form has its own address:
| Form | Address |
|---|---|
| Sign in | /auth/login/ |
| Sign up | /auth/signup/ |
| Password recovery | /auth/password/ |
Visitors reach these forms from the Sign in and Sign up buttons of the header (on phones, the person icon), and from the actions that need an account, such as My list or writing a comment. Members who are already signed in go to their account.
To change the address or use your own page, see Required pages in the Dbmovies documentation.
Signing in
Visitors sign in with their email address and password. show reveals the password while they type, and Forgot Password? opens the password recovery. The Sign in button turns on when both fields are filled in.
After signing in, visitors go back to the page they came from, for example the title where they tapped My list. If they came straight to the form, they go to their account.
Members stay signed in until they close their browser.
[SCREENSHOT_HERE: The sign in form, with Continue with Google, the email and password fields and Forgot Password?]
Creating an account
- The visitor fills in their first name, last name, email address and password. The password needs at least 8 characters, with at least one letter and one number.
- Accept and continue sends a 6-digit code to their email, and the form asks for it.
- With the right code, the account is created, the member is signed in and goes to their account. Dbmovies also sends a welcome email.
The code is valid for 60 minutes, and five wrong attempts cancel it. Try again starts over.
The code box only exists on that page. If the visitor closes or reloads it before entering the code, the registration stays pending, and the same email can sign up again about one or two hours later.
Under the button, a text says that by creating an account the visitor accepts your Terms and Conditions and your Privacy Policy.
Sign up is always open: anyone can create an account with the form. The WordPress setting Anyone can register does not apply to it. For Google, Dbmovies has its own setting for new accounts.
[SCREENSHOT_HERE: The sign up form, and the box that asks for the verification code]
Recovering a password
- The visitor enters their email address. If it belongs to an account, Dbmovies sends a 6-digit code to it. The answer is the same either way, so nobody can find out which emails have an account.
- The visitor enters the code.
- They choose a new password and confirm it. The same rules apply: 8 characters or more, with a letter and a number.
The member is then signed in and goes to their account. For safety, they are signed out on every other device, and Dbmovies emails them to confirm the change.
[SCREENSHOT_HERE: The password recovery steps: email, code and new password]
Sign in with Google
With Google sign-in turned on in Dbmovies, the sign in and sign up forms show Continue with Google at the top. The button only appears when Google loads in the visitor's browser. See Sign in with Google.
Protection
The three forms are protected by Dbmovies:
- Cloudflare Turnstile, if you turn it on, stops bots with a check that is usually invisible. See Cloudflare Turnstile.
- The Firewall blocks IP addresses, rejects disposable email addresses and limits repeated attempts. See Firewall.
Emails
Dbmovies sends three emails from these forms: the verification code, the welcome message and the password change notice. You edit their subject and text in Dbmovies › Settings › Email › Auth messages, and how they are sent in Dbmovies › Settings › Email › Settings.
Troubleshooting
| Problem | What to do |
|---|---|
| The verification code does not arrive | Ask the visitor to check their spam folder. If no email from your site arrives, review how your site sends email in Dbmovies › Settings › Email |
| Invalid or expired verification code. | The code is wrong, more than 60 minutes old, or had five wrong attempts. Start again to get a new one |
| There is a pending registration for this email. | The visitor started a sign up and did not enter the code. They can sign up again about one or two hours later |
| Account verification pending. when signing in | Same as above: the account was never confirmed with its code |
| Too many requests. | The visitor reached an attempt limit. They can try again after 15 minutes. See Firewall |
| Invalid security token. | The page was open for too long: reloading it fixes it. If it keeps happening, your page cache is keeping an old copy of the page, with a security token that expires after 12 to 24 hours. Since Dbmovies 1.3.39, caches that follow the standard signals no longer store this page. If yours still does, exclude the Authentication page from it and clear it |
| The forms show a 404 page, or no forms | See Required pages |
| Continue with Google does not appear | Check the settings in Sign in with Google. The button also hides when the browser blocks Google |