It seems this is still an issue, anyone that has the web address with the extension - /?idFriend=9 regardless of the number can use that to join the site when it is set to by invite only.
I have tested this with a dummy account where /?idFriend=9 is already an existing member - It made that member number 13, Ooooh Scary, Hahah!!
But Seriously
Anyone know what is going on with this? My site is strictly y invite only from the Admin, I have removed the links on the template so they can not be clicked, obviously if someone has the address the they can use it but we don't advertise it.
There needs to be a better system for invitation only sites. Solutions please anyone??
