Disable self-registration by default

Bug #1307294 reported by Aaron Wells on 2014-04-14
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mahara
Medium
Unassigned
1.10
Medium
Unassigned
1.9
Medium
Unassigned

Bug Description

We've been getting increasing amounts of reports from site owners complaining about bots registering or attempting to register accounts.

The "confirm registration" feature that was added in Mahara 1.5 prevents bots from automatically creating accounts. But, the register page still remains, and it sends out an email every time it's used, so this still makes it prone to abuse unless the site is also using a captcha.

It's easy to get rid of the register page by setting "Allow registration" off. By default we leave it on, but I think we should probably leave it off by default.

Reviewed: https://reviews.mahara.org/3256
Committed: http://gitorious.org/mahara/mahara/commit/e36301838074955aca95f6e1bca7b63e73f0a103
Submitter: Robert Lyon (<email address hidden>)
Branch: master

commit e36301838074955aca95f6e1bca7b63e73f0a103
Author: Aaron Wells <email address hidden>
Date: Mon Apr 14 16:27:31 2014 +1200

Turn off "Registration allowed" by default

Bug 1307294

Change-Id: I1b1389e5441645550930d36b79be72d13e0c743e

Reviewed: https://reviews.mahara.org/3259
Committed: http://gitorious.org/mahara/mahara/commit/9e64d5a0d4412d1c2e09a6fb97ad827227309b52
Submitter: Aaron Wells (<email address hidden>)
Branch: 1.9_STABLE

commit 9e64d5a0d4412d1c2e09a6fb97ad827227309b52
Author: Aaron Wells <email address hidden>
Date: Mon Apr 14 16:27:31 2014 +1200

Turn off "Registration allowed" by default

Bug 1307294

Change-Id: I1b1389e5441645550930d36b79be72d13e0c743e

tags: added: usermanualupdate
Aaron Wells (u-aaronw) on 2014-10-20
Changed in mahara:
milestone: 1.10.0 → none
Aaron Wells (u-aaronw) on 2014-10-21
Changed in mahara:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers