Account Lock - Block Email & Password Changes 1.1.0

A lightweight add-on that adds two new permissions under General Permissions to control whether users can change their email address or password through the forum's account settings.

Features:

• Block email changes — Adds a "Can change email address" permission
• Block password changes — Adds a "Can change password" permission
• Both permissions default to Allow so existing behavior is unchanged until you configure them
• Clean permission-based approach — no template modifications, no core file edits
• Friendly error messages when a user attempts a blocked action
• The security page (2FA, passkeys) remains accessible even when password changes are blocked

Use case:Ideal for sites where member account management is handled through an external system (such as a main site dashboard) and you want to prevent users from modifying their credentials directly through the forum.

Installation:

1. Upload the contents of the upload/ directory to your XenForo root
2. Install from Admin CP > Add-ons

Configuration:

1. Go to Admin CP > Groups & Permissions > User group permissions
2. Select the user group you want to restrict
3. Under General Permissions, set "Can change email address (Account Lock)" and/or "Can change password (Account Lock)" to Never

Requirements:

• XenForo 2.3.0+
• PHP 8.0+

Uninstallation:Uninstall through Admin CP > Add-ons. All permissions and phrases are automatically cleaned up. No database tables or columns are created by this add-on.