Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fake users are registering successfully #62

Open
benaltair opened this issue May 13, 2021 · 3 comments
Open

Fake users are registering successfully #62

benaltair opened this issue May 13, 2021 · 3 comments
Labels
followup Further information has been requested from the reporter.

Comments

@benaltair
Copy link
Member

benaltair commented May 13, 2021 •
edited
Loading

We'll need to investigate this, but bot users are able to easily register. Seems like reCAPTCHA is being bypassed for registration form.
image (9)
@benaltair
Copy link
Member Author

Front-end validation is happening in the browser, but it's likely that there is not strong enough server-side validation at this time for registration in particular. This sort of thing is throttled server-side anyway though.

@benaltair
Copy link
Member Author

Enforcing hostname in the reCAPTCHA response to test results.

@benaltair
Copy link
Member Author

Let's also make email verification mandatory:
image

@benaltair benaltair added the followup Further information has been requested from the reporter. label May 13, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
followup Further information has been requested from the reporter.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@benaltair