mahara-contributors team mailing list archive

[Robert Lyon <robertl@xxxxxxxxxxxxxxx>]

** Changed in: mahara/1.9
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1307294

Title:
  Disable self-registration by default

Status in Mahara ePortfolio:
  Fix Committed
Status in Mahara 1.10 series:
  Fix Committed
Status in Mahara 1.9 series:
  Fix Released

Bug description:
  We've been getting increasing amounts of reports from site owners
  complaining about bots registering or attempting to register accounts.

  The "confirm registration" feature that was added in Mahara 1.5
  prevents bots from automatically creating accounts. But, the register
  page still remains, and it sends out an email every time it's used, so
  this still makes it prone to abuse unless the site is also using a
  captcha.

  It's easy to get rid of the register page by setting "Allow
  registration" off. By default we leave it on, but I think we should
  probably leave it off by default.

To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1307294/+subscriptions