User able to register with invalid email address

[fais3000]

We've been experiencing issues with fake users. Our mods usually ban users if they are abusive or spamming (usually on the shoutbox).

Digging further we found out these users have been able to use invalid emails e.g "asas@sdsdmsd,xcx"

Once a user has this email address, they can't be banned or deleted because of the "comma" inside the email. So we have to manually change the email and then ban function works.

[baris]

Any errors when you try to ban?

[fais3000]

@baris

Example of a person exploiting this http://chatrooms.talkwithstranger.com/user/ho-lee-fuk

[fais3000]

@baris You may not be able to see the email on his profile. Here is how it looks.

[baris]

Can you file this on our github issue tracker? Thanks.

[fais3000]

@baris Done!

Users able to signup with invalid email address (containing comma) · Issue #5902 · NodeBB/NodeBB

In ref to https://community.nodebb.org/topic/11165/user-able-to-register-with-invalid-email-address Users are able to create an account via local signup providing an invalid email address. e.g. "abc@gm,com". Once the account is created, ...

GitHub (github.com)