| Author |
Message |
HellRaizher
Corporal
Joined: May 15, 2003
Posts: 52
Location: Denmark
|
 Posted:
Fri Dec 19, 2003 9:03 pm |
  |
I use the email user activation on my site and it works fine when they use the register link built in to PHP Nuke. But if they go in to the members list or the forum (phpBB) there is a register link in those two, and if they use them they can register without email activation. So the same user can make mutiple accounts without the email check or with fake emails.
This should NOT be possible!
How do I remove these links? I cant find them in the pbpBB code. |
_________________
WoWClan.dk - The danish World of Warcraft clan. We are also fans/players of other RPG games like Dungeons & Dragons.
Visit us, join us!  |
|
      |
|
maciekp
Sergeant
Joined: Sep 09, 2003
Posts: 94
Location: Perth, WA
|
| Posted:
Fri Dec 19, 2003 10:25 pm |
|
File: profile mode: register |
_________________
ElectricDice 0.8 - password & MD5, sitekey generator tool
Use SHA1 in Nuke |
|
|
|
HellRaizher
Corporal
Joined: May 15, 2003
Posts: 52
Location: Denmark
|
| Posted:
Sat Dec 20, 2003 1:11 am |
|
Could you explain that a little more... Cant make any sens of that... |
_________________
WoWClan.dk - The danish World of Warcraft clan. We are also fans/players of other RPG games like Dungeons & Dragons.
Visit us, join us! |
|
|
|
HellRaizher
Corporal
Joined: May 15, 2003
Posts: 52
Location: Denmark
|
| Posted:
Sat Dec 20, 2003 11:44 pm |
|
Can someone please help with this problem. I would like to get this security problem corrected as soon as possible. |
_________________
WoWClan.dk - The danish World of Warcraft clan. We are also fans/players of other RPG games like Dungeons & Dragons.
Visit us, join us! |
|
|
|
wizard_quest
Nuke Cadet
Joined: Oct 29, 2003
Posts: 2
|
| Posted:
Sun Dec 21, 2003 9:44 pm |
|
A simple fix maybe to change the permissions on the Members List (Nuke side under Module administration) to registered users only. Then preventing non-members from seeing the members list and the register link inside.
Just a quick work around, not a code fix though. |
|
|
|
|
HellRaizher
Corporal
Joined: May 15, 2003
Posts: 52
Location: Denmark
|
| Posted:
Mon Dec 22, 2003 10:51 pm |
|
| Quote: |
A simple fix maybe to change the permissions on the Members List (Nuke side under Module administration) to registered users only. Then preventing non-members from seeing the members list and the register link inside.
Just a quick work around, not a code fix though. |
This does not solve the problem... If you set it to members only, you can still register in the forum menu without email activation! |
_________________
WoWClan.dk - The danish World of Warcraft clan. We are also fans/players of other RPG games like Dungeons & Dragons.
Visit us, join us! |
|
|
|
whey
Nuke Soldier
Joined: Nov 23, 2003
Posts: 11
|
| Posted:
Mon Dec 22, 2003 10:58 pm |
|
| HellRaizher wrote: |
This does not solve the problem... If you set it to members only, you can still register in the forum menu without email activation! |
Then fix your configuration so they can't register without email activation.
http://www.phpbb.com/support/guide/#section3_2_2
Enable account activation - When set to None, a user may log in as soon as he/she registers. When set to User, a user must validate his email address before logging in. The user will be sent an email with an activation link. When the user clicks this link, their account is activated and he/she may log in. When set to Admin, a user's account must be activated by an administrator. For more information, see 3.5.3 User Management. |
|
|
|
|
HellRaizher
Corporal
Joined: May 15, 2003
Posts: 52
Location: Denmark
|
| Posted:
Tue Dec 23, 2003 5:23 am |
|
Thanks... this finnaly solved my problem.... |
_________________
WoWClan.dk - The danish World of Warcraft clan. We are also fans/players of other RPG games like Dungeons & Dragons.
Visit us, join us! |
|
|
|
|
|
