Disable self-registration by default
Bug #1307294 reported by
Aaron Wells
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Mahara |
Fix Released
|
Medium
|
Unassigned | ||
| 1.10 |
Fix Released
|
Medium
|
Unassigned | ||
| 1.9 |
Fix Released
|
Medium
|
Unassigned | ||
Bug Description
We've been getting increasing amounts of reports from site owners complaining about bots registering or attempting to register accounts.
The "confirm registration" feature that was added in Mahara 1.5 prevents bots from automatically creating accounts. But, the register page still remains, and it sends out an email every time it's used, so this still makes it prone to abuse unless the site is also using a captcha.
It's easy to get rid of the register page by setting "Allow registration" off. By default we leave it on, but I think we should probably leave it off by default.
Revision history for this message
| Mahara Bot (dev-mahara) wrote A patch has been submitted for review | #1 |
Revision history for this message
| Mahara Bot (dev-mahara) wrote A change has been merged | #2 |
Revision history for this message
| Mahara Bot (dev-mahara) wrote A patch has been submitted for review | #3 |
Revision history for this message
| Mahara Bot (dev-mahara) wrote A change has been merged | #4 |
| tags: | added: usermanualupdate |
| Changed in mahara: | |
| milestone: | 1.10.0 → none |
| Changed in mahara: | |
| status: | Fix Committed → Fix Released |
To post a comment you must log in.
Patch for "master" branch: https:/