"verifyemail" option, even when enabled, can easily be overidden

[tsadi]

this option in vB control panel :

================================================================================

[b]verifyemail[/b] Yes | No

Verify email address during registration. The password is emailed to the new registrant during registration to confirm the identity and email address.

================================================================================


even when turned on, or u clicked on "YES", can easily be overridden. i.e., the first time you register, you enter a valid email account. and then after you have activated your account, you can now click on your "profile" and change your email address to anything you want.

[tsadi]

suggestion

may i suggest, that once a user changes his/her email address [i](i.e., only if verifyemail option is turned on)[/i], his/her account will automatically be deactivated and can only be reactivated after he clicks on a new "activation" link with a new "activateid" that he received on his/her new email address.

that way, we can verify that the newly entered email address is indeed valid. :D


[Edited by tsadi on 08-18-2000 at 03:05 AM]

[George L]

yeah i belive UBB or Ultraboard does that when you change email addresses or passwords...

[TechTalk]

Yea id have to say this is one of vb's most useless features.

Plus, after all the trouble bira
had with it.....i would never use it anyway

~Chris

[bira]

I don't have any more problems, thank God (and Doron!), since we hacked the verify script bit to not include the username (which was the source of all evil), and since we changed the activation e-mail to CAPITAL letters :)

However, I have an excess of about 30 registrations waiting to be activated at the moment, which are probably never going to be due to the fact that people used bogus e-mail address thinking they can get away with it, and what's more, the point tsadi raises is indeed a major concern. I am still sitting here quietly, for now, waiting to see what the new version will bring about. If the procedure hasn't changed, though, I'll come back kicking and screaming :) :)