Registration authorization via email + small bug fixes [message #1301] |
Thu, 04 April 2002 15:36 |
npf77
Messages: 7 Registered: March 2002 Location: France
Karma: 0
|
Junior Member |
|
|
Hi,
As I needed for my job kind of a private forum, I've hacked the forum code a bit (in a different way than the previous thead....
Here is what I propose:
*** Registration isn't granted automatically (say after email confirmation) but now, needs a moderator's authorization. Mechanism: once the confirmation email is received and the confirmation via the given URL done, a authorization email is sent to all moderators. This email contains info on the new user and an URL, similar to the confirmation email one's. To grant authorization, a moderator only need to go to this URL. I think this way was easier than a registration queue as proposed in the suggestions forum. -> changes made: . add an authorization key (auth_key in fud_users table) to the DB. . change emailconf.php, users_reg.inc, admuser.php... to play with this new key.
*** bug fixes: can't access forum with anonymous viewing set to NO with a user whose registration isn't complete anymore.
*** restricts view of "Logged in users list" to user with completed registration.
Work may need to be done to modularize this stuff using the control panel rather than XEmacs.
In attachment, a patch file. to apply patch:
$ tar xvfz forum-v1.2.4.tar.gz $ cd forum_install $ patch -p1 < ../forum-v1.2.4-privateforum.patch
-- Pierre.
|
|
|
Re: Registration authorization via email + small bug fixes [message #1307 is a reply to message #1301] |
Thu, 04 April 2002 16:51 |
Ilia
Messages: 13241 Registered: January 2002
Karma: 0
|
Senior Member Administrator Core Developer |
|
|
Thanks for the patch, small note the security bug that allows non-confirmed users to see posts in forums where anon viewing is disabled has been added yesterday to the CVS tree. It affects the following files: thread.php,msg.php,tree.php,showposts.php,search.php,selmsg.php
FUDforum Core Developer
|
|
|
|
|
|
|
|
|
|
|
|
|