Originally Posted by Bulent Tekcan (Post 1393686)

Hello

My mind confused some points....normaly disable Verify Email address in Registration while this product enable.If it is enable maybe 4 times see regitration screen :)

1- Enter mail address and image code.
2- Receive verification code.
3- Enter verification code and other things than finish regitration.

Everything normal at this point.....But...

If you change your mail address in your control panel this system never control new mail,usergroup not change to awaiting group.

This is security hole I think.

What is yours idea ?

Originally Posted by Alibass (Post 1393691)

Yes I agree, not good. This allows member to change their email address immediately to a fake one without being checked which really defeats the whole purpose of this hack. :(

Originally Posted by SBlueman (Post 1393692)

Wonder if there is a way to:

A) Inject the verification code into the correct filed on the registration page once they click the email link
B) Not allow an email change once the email is registered. Only allow an admin to change that field.

Originally Posted by TigerWare (Post 1393696)

With respect, I don't see how this is actually a problem with this modification. This modification is clearly designed (as per the title) to verify an email address before registration is completed. After registration is completed goes beyond the scope of this modification. Thoughts?

This is a very nice modification, well done. :up:

Originally Posted by Bulent Tekcan (Post 1393699)

Hehe I have a 350.000 member,if 1000 member needs to change I'll be crazy I think :D

Originally Posted by Bulent Tekcan (Post 1393701)

Did you tried this plugin ? Please change you mail after register.Usergroup not change to Awaiting Group,and also new mail fake or real no problem,system accept it.This is not good.

Originally Posted by yahoooh (Post 1393738)

this is should be fixed by adding same thing when the user want to change his email


we wait the develper to make it

Originally Posted by papill0n (Post 1393960)

I have installed this and when testing it out when I click to register and tick I have read, and agree to abide by the rules when I click the register button it does nothing but takes me back to where I began

Originally Posted by Nam (Post 1394150)

I thought once the user register, check email and complete the account, everything else will handle by default vb system, this includes when user changing his email, no?

If the user change the email to fake one after registration, but still belong to Registered group, then it is a big flaw.

Otherwise, it's perfect and great idea.

Originally Posted by Alibass (Post 1394160)

What we have been talking about is if you have vB options>user reg options>Verify Email address in Registration set to 'no' so the new member will not half to verify his/her email a second time via activation link then the user can change their email addy to a fake (via usercp) and they are not ask to reverify their address by putting them in users awaiting email verification group and sending out a email with a activation link for new addy.
Making a new member activate their email address twice during registration sucks and it sucks allowing them to change their address to a fake after registering.

Originally Posted by Nam (Post 1394150)

I thought once the user register, check email and complete the account, everything else will handle by default vb system, this includes when user changing his email, no?

Originally Posted by Alibass (Post 1394160)

What we have been talking about is if you have vB options>user reg options>Verify Email address in Registration set to 'no' so the new member will not half to verify his/her email a second time via activation link then the user can change their email addy to a fake (via usercp) and they are not ask to reverify their address by putting them in users awaiting email verification group and sending out a email with a activation link for new addy.
Making a new member activate their email address twice during registration sucks and it sucks allowing them to change their address to a fake after registering.

Originally Posted by Almotmaiz.Net (Post 1394198)

Hello ,
i do this before reg form . but in next release i'll do this an option (veify in Email change form ) :)

Originally Posted by momen (Post 1394274)

Yes that's right, no member can change his/her email with a fake one after registration.

Just set yes to this option.. Verify Email address in Registration
Otherwise you don't need this product.

I don't think it will be a good idea to put verification code twise.

Originally Posted by Bulent Tekcan (Post 1394618)

Bad news...
I find another bug....This plugin not checked Banned Email Addresses.This is very very important point...

Originally Posted by momen (Post 1394729)

You don't need from this Product to check for you the Banned Email Addresses, because this checking will be done by vBulletin's Default Settings after pressing Complete Registration's button.

What does this product do is to check for working email before registration, which it's perfect idea.

Originally Posted by momen (Post 1394274)

Just set yes to this option.. Verify Email address in Registration
Otherwise you don't need this product.