** Changed in: mahara/1.9
Status: In Progress => Fix Committed
--
You received this bug notification because you are a member of Mahara
Contributors, which is subscribed to Mahara.
Matching subscriptions: Subscription for all Mahara Contributors -- please ask
on #mahara-dev or mahara.org forum before editing or unsubscribing it!
https://bugs.launchpad.net/bugs/1307294
Title:
Disable self-registration by default
Status in Mahara ePortfolio:
Fix Committed
Status in Mahara 1.10 series:
Fix Committed
Status in Mahara 1.9 series:
Fix Committed
Bug description:
We've been getting increasing amounts of reports from site owners
complaining about bots registering or attempting to register accounts.
The "confirm registration" feature that was added in Mahara 1.5
prevents bots from automatically creating accounts. But, the register
page still remains, and it sends out an email every time it's used, so
this still makes it prone to abuse unless the site is also using a
captcha.
It's easy to get rid of the register page by setting "Allow
registration" off. By default we leave it on, but I think we should
probably leave it off by default.
To manage notifications about this bug go to:
https://bugs.launchpad.net/mahara/+bug/1307294/+subscriptions
_______________________________________________
Mailing list: https://launchpad.net/~mahara-contributors
Post to : mahara-contributors@lists.launchpad.net
Unsubscribe : https://launchpad.net/~mahara-contributors
More help : https://help.launchpad.net/ListHelp
