User able to register with invalid email address

[fais3000]

We've been experiencing issues with fake users. Our mods usually ban users if they are abusive or spamming (usually on the shoutbox).

Digging further we found out these users have been able to use invalid emails e.g "[email protected],xcx"

Once a user has this email address, they can't be banned or deleted because of the "comma" inside the email. So we have to manually change the email and then ban function works.

[baris]

Any errors when you try to ban?

[fais3000]

@baris

Example of a person exploiting this http://chatrooms.talkwithstranger.com/user/ho-lee-fuk

[fais3000]

@baris You may not be able to see the email on his profile. Here is how it looks.

[baris]

Can you file this on our github issue tracker? Thanks.

[fais3000]

@baris Done!

https://github.com/NodeBB/NodeBB/issues/5902

fais3000 created this issue in NodeBB/NodeBB

closed Users able to signup with invalid email address (containing comma) #5902