Several times per week, we check for new registrations to validate them.
Two objectives
- Help integrate new community members
- Avoid spammer and scammers
- Improve registration and spam prevention process and features -> Spam Protection & Registration
Flow
- User self-registers at tiki-register.php
- Community Team approves registration
- User receives confirmation email
- User validates email (Tiki should be changed so they validate email first as this reduces work for the site admin and it confirms to the user that (s)he is indeed in the system
- User participates to the community
If user is a spammer, delete his account, and user tracker entry.
How to detect spammers
- When their is a language, there is a higher chance of being legit
- Google their email and/or username
- Check if their SourceForge.net username checks out. Ex.: http://sourceforge.net/users/arion92fr/ Make sure to put all in lowercase.
- Read their description
- Send them a private email
- Check out their domain name
- If it's a free email hosting, it's a higher chance of spam
Dogfood
- PluginListExecute
- List of users which have only 2 characters in the About Me. And delete the users, including their tracker info
- It would be nice to have IP address of registrant in the confirmation email
- It would be nice to just be able to reply the registration request to email the person and ask for more info
- We should use a service like stopforumspam.com to provide an estimate of 0 to 10 of the likelihood this is a spammer and just ask more & more questions
- When you delete a spammer, it should also offer to delete the user tracker (maybe a checkbox, checked by default) - this already happens automatically for me using version 9x - lindon
- It would be nice to be able to make a list of all items in a tracker that are not associated to a user (perhaps leftover info from a deleted user...)
- Should be possible to ban an e-mail from tiki-admin_banning.php
- Would be nice in the validation email, to have the IP
- Would be nice in the validation email, to have a link to directly delete the user account
alias