Is there any way to prevent login till email verify??

[gotwf]

/admin/plugins/email-blacklist

Enable isTempMail API check

Maybe worth a gander?

[Varun Ganesh D]

@gotwf Yes Using this plugin
Problem is now users are entering some random emai id ending with @gmail.com. so they get logged in and access contents.
Im using AWS Ses. So those email IDs are not valid. Email bounce rating are increasing rapidly.

How to prevent that!!

[julian]

https://github.com/NodeBB/NodeBB/issues/8662

[Varun Ganesh D]

@julian Thanks
Waiting for next stable Update.
If some minor features are added to this software then it's an ultimate forum Software. Can't beat this from other software
Peace ️

[gotwf]

@Varun-Ganesh-D Seems like the mailq constipation issue could be rectified by some SMTP server side tuning, eh? Perchance do you have admin access to your SMTP relay?

[Varun Ganesh D]

@gotwf yep
People are making silly typo errors also cause mail bounces.

[crazycells]

@Varun-Ganesh-D said in Is there any way to prevent login till email verify??:

People who are giving fake email also can login.
Is there any way to lock login untill they verify email id?
People are just entering randon string with @ symbol and logging in..
It making problem in Email server too. Lots of emails bouncing..

Pls tell any way to prevent this? Or is it possible to restrict email id? Like gmail, Yahoo can only able to register?

Hope for the solution

We have similar problem:

https://github.com/NodeBB/NodeBB/issues/8519

Right now, best we could do is that using blacklist plugin and keep adding wrongly written email address extensions to this list...

[Varun Ganesh D]

@crazycells yeah using it. It can prevent by registering using temp mails.
But as developer replied me on this thread they are adding features like if user not confirm email he will not get access to forum..
So obviously user should verify email.
Mine AWS account bounce rate increased.
So i changed to outlook email smtp.. per day 5000 emails can send through that as i read.

[julian]

@Varun-Ganesh-D Hang on -- are you guys requiring email confirmation in the ACP?

When looking through the code, it suggests that if this option is enabled, then emails are not sent out unless the user's email is confirmed... exceptions are the initial registration and email verification step.

[Varun Ganesh D]

@julia mhmmmm ...
Optional thing required to enable email confirmation is required to login..
I think it may help to prevent fake email users.
Genuine email with verification only the option to access the forum then automatically they Register and verify the email.
Now they just typing random words followed by @gmail.com and automatically it logged in without verifying email..
If they put random email also it should not redirect to logged in state from Registration page.
Whether they again put that email, password it should not log in, and it should give an error email confirmation is required to login please click the verification link sent to your email.. something like that..