Hello

My mind confused some points....normaly disable Verify Email address in Registration while this product enable.If it is enable maybe 4 times see regitration screen :)

1- Enter mail address and image code.
2- Receive verification code.
3- Enter verification code and other things than finish regitration.

Everything normal at this point.....But...

If you change your mail address in your control panel this system never control new mail,usergroup not change to awaiting group.

This is security hole I think.

What is yours idea ?

Yes I agree, not good. This allows member to change their email address immediately to a fake one without being checked which really defeats the whole purpose of this hack. :(

Wonder if there is a way to:

A) Inject the verification code into the correct filed on the registration page once they click the email link
B) Not allow an email change once the email is registered. Only allow an admin to change that field.

With respect, I don't see how this is actually a problem with this modification. This modification is clearly designed (as per the title) to verify an email address before registration is completed. After registration is completed goes beyond the scope of this modification. Thoughts?

This is a very nice modification, well done. :up:

Hehe I have a 350.000 member,if 1000 member needs to change I'll be crazy I think :D

Did you tried this plugin ? Please change you mail after register.Usergroup not change to Awaiting Group,and also new mail fake or real no problem,system accept it.This is not good.

this is should be fixed by adding same thing when the user want to change his email


we wait the develper to make it

I have installed this and when testing it out when I click to register and tick I have read, and agree to abide by the rules when I click the register button it does nothing but takes me back to where I began

I thought once the user register, check email and complete the account, everything else will handle by default vb system, this includes when user changing his email, no?

If the user change the email to fake one after registration, but still belong to Registered group, then it is a big flaw.

Otherwise, it's perfect and great idea.

What we have been talking about is if you have vB options>user reg options>Verify Email address in Registration set to 'no' so the new member will not half to verify his/her email a second time via activation link then the user can change their email addy to a fake (via usercp) and they are not ask to reverify their address by putting them in users awaiting email verification group and sending out a email with a activation link for new addy.
Making a new member activate their email address twice during registration sucks and it sucks allowing them to change their address to a fake after registering.