mahara-contributors team mailing list archive

[Aaron Wells <1307294@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

We've been getting increasing amounts of reports from site owners
complaining about bots registering or attempting to register accounts.

The "confirm registration" feature that was added in Mahara 1.5 prevents
bots from automatically creating accounts. But, the register page still
remains, and it sends out an email every time it's used, so this still
makes it prone to abuse unless the site is also using a captcha.

It's easy to get rid of the register page by setting "Allow
registration" off. By default we leave it on, but I think we should
probably leave it off by default.

** Affects: mahara
     Importance: Medium
         Status: In Progress

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1307294

Title:
  Disable self-registration by default

Status in Mahara ePortfolio:
  In Progress

Bug description:
  We've been getting increasing amounts of reports from site owners
  complaining about bots registering or attempting to register accounts.

  The "confirm registration" feature that was added in Mahara 1.5
  prevents bots from automatically creating accounts. But, the register
  page still remains, and it sends out an email every time it's used, so
  this still makes it prone to abuse unless the site is also using a
  captcha.

  It's easy to get rid of the register page by setting "Allow
  registration" off. By default we leave it on, but I think we should
  probably leave it off by default.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1307294/+subscriptions