Strange New Registration behavior
 

Hey guys,

I have been watching the Mail delivery failed: returning message to sender emails I get from members who have bad emails, and I noticed something very odd today.

In addition to the members with bad emails who are subscribed to threads (which I can now delete with ease, thanks to the tip from kh99 :up: ), I saw one message that I do not understand.

I checked and the message that was trying to be sent was the Registration message:

I checked and there is no registration for that member with that Gmail in my system.

BUT! There is a newly registered member with that name and an exact same hotmail address.

My question: can someone try to register a name with one email, and without ever completing the registration (because the email failed, obviously), can they register successfully the same name with a different email?

I do not see how: if I register with the name John and the email john@gmail.com, then the username John should be in my db as Unconfirmed, waiting on email usergroup, right? No one can register the same username John again, right? Different email or not, that username should not be available.

This is very odd, like some kind of spambot behavior, can anyone explain?

I'm not sure if I'm following that correctly, but I think a user who's awaiting email confirmation can log in and change their email. I don't know why someone would have done that on your site, but I think it might explain how it could happen.

Oh, I didn't realize someone could change their email even though they had not confirmed their account. That may explain it. Thanks.