mahara-contributors team mailing list archive

[Aaron Wells <1307294@xxxxxxxxxxxxxxxxxx>]

** Also affects: mahara/1.10
   Importance: Medium
       Status: In Progress

** Also affects: mahara/1.9
   Importance: Undecided
       Status: New

** Changed in: mahara/1.10
    Milestone: 1.9.0 => 1.10.0

** Changed in: mahara/1.9
       Status: New => In Progress

** Changed in: mahara/1.9
   Importance: Undecided => Medium

** Changed in: mahara/1.9
    Milestone: None => 1.9.0

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1307294

Title:
  Disable self-registration by default

Status in Mahara ePortfolio:
  In Progress
Status in Mahara 1.10 series:
  In Progress
Status in Mahara 1.9 series:
  In Progress

Bug description:
  We've been getting increasing amounts of reports from site owners
  complaining about bots registering or attempting to register accounts.

  The "confirm registration" feature that was added in Mahara 1.5
  prevents bots from automatically creating accounts. But, the register
  page still remains, and it sends out an email every time it's used, so
  this still makes it prone to abuse unless the site is also using a
  captcha.

  It's easy to get rid of the register page by setting "Allow
  registration" off. By default we leave it on, but I think we should
  probably leave it off by default.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1307294/+subscriptions