Email validation of registration and other registration issues -- 2
OK, so I like so many features of tikiwiki, that is why I am trying it — although with all the features, it may take time before I can get it to have a look like I want.
One good feature that I like is the conciousness of the developers about security (kudos to the development team):
(1) Registration challenge
-- this prevents automatic registration — although make it more difficult by including letters and numbers that are skewed so that it will be even more difficult for a machine to automatically read)
(2) Email validation of registration.
— as I stated in the original post above, this does not work with the one I installed just right now. it seems it is indeed still a bug, based from the link on the Dev.tikiwiki.org (see links shown in the original post)
(3) Admin approval
-- this is even getting better; but it should not replace the other two above. What I would like to suggest though is that there must be a way to screen users (e.g., they tell something about their interests, where they are from, etc.) Otherwise, what will be the basis for the administration for "approving" or disapproving any particular registrant? Without this added information, I am not sure how much additional security an "admin approval" provides — with what is already achieved through a combination of features #1 and #2.
(4) I understand that you are also trying to test a way of checking whether an email address is valid or not. I think this is also another layer of defense.
Note:
After I changed the preferences, suddenly, the "email address is one of the blanks" that appears in the "log-in" option. Is this another security option. It seems it is not the intention to fill this up though because I can log-in without filling the email, during the process.
cgc0202