devinliao wrote:just what exactly are the 2 steps?
Like does it require email activation and admin activation?
Well, there are actually 6 steps
- A new user registers
- An activation e-mail is sent to the user and a "user activation required" message is displayed
- The user follows the activation link
- An activation e-mail is sent to the admin and an "admin activation required" message is displayed
- The admin follows the activation link
- An "account activated" e-mail is sent to the user and an "account activated" message is displayed.
I do not have any Mods for this installed, I'm just using what comes native with 2.0.19.
I get an email telling me that a new user has registered and needs to be activated. Instead of clicking on the activation link, however, I close the email, go to my forum, go into the ACP, and take a look at the new user.
There are several telltale things I look for that indicates a spammer. The biggest one is that I don't advertise and I personally know probably 98% of those who register to join the forum. If I have any doubts at all, I change the email extension from .com, .net, .ru, or whatever to .spammer. I don't think they will be able to use that to recover their password using that.
I also change their password, strip out any contact information such as website, ICQ number, etc, give them a Rank Title of Spammer, remove all posting priviledges, and never bother to activate them.
I would love to just delete them but I have had some idiots re-register almost immediately using the same username!
I will soon be adding a medium long registration form that must be filled out before they will be considered for membership. I'm sure there will still be some who try to join but I will have that much more information to use to deny them access.
Am I paranoid? Yes. Do I care what anyone else thinks? No. I use my site and forum mainly for teaching purposes and have no desire to allow any wolves in among my sheep.