@julia mhmmmm ...
Optional thing required to enable email confirmation is required to login..
I think it may help to prevent fake email users.
Genuine email with verification only the option to access the forum then automatically they Register and verify the email.
Now they just typing random words followed by @gmail.com and automatically it logged in without verifying email..
If they put random email also it should not redirect to logged in state from Registration page.
Whether they again put that email, password it should not log in, and it should give an error email confirmation is required to login please click the verification link sent to your email.. something like that..
Send Validation EMail
-
I am testing on my forum. So i have create an new user. Because an typo the mail address was wrong. So no validation email. Ok, no problem. I go to admin panel and will send an new validation email, but....
I think this can be better solved.
-
Just to confirm, you tried to send the confirmation email as an admin and got this error? I think we should allow admins to bypass the time limit.
-
@baris said in Send Validation EMail:
I think we should allow admins to bypass the time limit.
Please do so, let me know if you want a github issue...
when we are having password-reset problems with users, that time limit also prevents us to send emails through ACP right away...
-
Yes, send email as admin.
-
-
@baris Have we given any thought to the havoc such could wreak on the Internet at large when an admin account becomes compromised? Maybe not such a bad idea to enforce some minimal delay?