Hi –
I have a members-only site where ‘events’ have been renamed ‘departures.’
Much to my client’s dismay, we discovered the pages
https://sales.wilderness-explorers.com/departures
and
http://sales.wilderness-explorers.com/departures
are visible to the wide open world even though I use a membership plugin to block access to my pages unless the user is logged in.
This is because those are not actual WP pages – they’re ‘virtual’ pages generated by your plugin, and outside the access control tools of my membership plugin.
I found this article to be very informative:
https://theeventscalendar.com/knowledgebase/making-members-calendar/
but honestly I am dismayed that the workaround requires mucking around with the volatile functions.php file.
So, please, good people at Modern Tribe… please add at tick box to the plugin settings in a future release:
0 Disable auto-generated pages
Since we can create an actual WP page with calendar content via shortcodes – and membership plugins can readily control access to those real WP pages – we would end up with identical functionality and a security/privacy hole would be plugged.
Most of all, this simple preference tickbox would keep your customers out of the update-vulnerable functions. php file.
Thanks-
M