Multisite behavior¶

This section clarifies some special interactions with multisite installations of Wordpress. Most importantly:

On multisite environments, the autologin links addon is only available to network administrators.

This choice was made because autologin links are generated for and associated with a user account. The addon allows manipulating and displaying autologin links for all users of a network. As result, a regular website administrator who would have access the addon interface could grant himself access to any account - including the network administrator’s accounts:

  1. Generate a login link for any network administrator account

  2. Login in to the network administrator account with the generated link

  3. The regular website administrator now would have full control over the entire Wordpress site network.

To prevent this obvious security issue, the added features of this plugin are only available to network administrators.