Is there any way to prevent login till email verify??
-
@gotwf Yes Using this plugin
Problem is now users are entering some random emai id ending with @gmail.com. so they get logged in and access contents.
Im using AWS Ses. So those email IDs are not valid. Email bounce rating are increasing rapidly.How to prevent that!!
-
New system group for verified users · Issue #8662 · NodeBB/NodeBB
A new system group for verified users. Users will be added to this group upon successful email verification. Upon NodeBB setup, just like registered-users group, a Verified Users group should be created. Benefits: More fine-grained contr...
GitHub (github.com)
-
@Varun-Ganesh-D Seems like the mailq constipation issue could be rectified by some SMTP server side tuning, eh? Perchance do you have admin access to your SMTP relay?
-
@Varun-Ganesh-D said in Is there any way to prevent login till email verify??:
People who are giving fake email also can login.
Is there any way to lock login untill they verify email id?
People are just entering randon string with @ symbol and logging in..
It making problem in Email server too. Lots of emails bouncing..Pls tell any way to prevent this? Or is it possible to restrict email id? Like gmail, Yahoo can only able to register?
Hope for the solution
We have similar problem:
new users with fake email addresses exhaust email server · Issue #8519 · NodeBB/NodeBB
Hello, some users (without knowing they have to confirm their email address) are registering the forum with an email address that does not exist. Sometimes it is clear for us because they use [email protected] which is clearly fake. But...
GitHub (github.com)
Right now, best we could do is that using blacklist plugin and keep adding wrongly written email address extensions to this list...
-
@crazycells yeah using it. It can prevent by registering using temp mails.
But as developer replied me on this thread they are adding features like if user not confirm email he will not get access to forum..
So obviously user should verify email.
Mine AWS account bounce rate increased.
So i changed to outlook email smtp.. per day 5000 emails can send through that as i read. -
@Varun-Ganesh-D Hang on -- are you guys requiring email confirmation in the ACP?
When looking through the code, it suggests that if this option is enabled, then emails are not sent out unless the user's email is confirmed... exceptions are the initial registration and email verification step.
-
@julia mhmmmm ...
Optional thing required to enable email confirmation is required to login..
I think it may help to prevent fake email users.
Genuine email with verification only the option to access the forum then automatically they Register and verify the email.
Now they just typing random words followed by @gmail.com and automatically it logged in without verifying email..
If they put random email also it should not redirect to logged in state from Registration page.
Whether they again put that email, password it should not log in, and it should give an error email confirmation is required to login please click the verification link sent to your email.. something like that..
️