Go Back   vb.org Archive > vBulletin Modifications > Archive > vB.org Archives > vBulletin 3.6 > vBulletin 3.6 Add-ons

Reply
 
Thread Tools
vMail - Verify Mail before registration. Details »»
vMail - Verify Mail before registration.
Version: 1.4.1, by Almotmaiz.Net Almotmaiz.Net is offline
Developer Last Online: Oct 2013 Show Printable Version Email this Page

Category: Miscellaneous Hacks - Version: 3.6.x Rating:
Released: 11-13-2007 Last Update: 05-17-2008 Installs: 292
 
No support by the author.

this product can be founded in this thread https://vborg.vbsupport.ru/showthread.php?t=201466

Supporters / CoAuthors

Show Your Support

  • This modification may not be copied, reproduced or published elsewhere without author's permission.

Comments
  #102  
Old 12-02-2007, 07:59 PM
Bulent Tekcan Bulent Tekcan is offline
 
Join Date: Oct 2003
Location: TURKEY - Istanbul
Posts: 437
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Hello

My mind confused some points....normaly disable Verify Email address in Registration while this product enable.If it is enable maybe 4 times see regitration screen

1- Enter mail address and image code.
2- Receive verification code.
3- Enter verification code and other things than finish regitration.

Everything normal at this point.....But...

If you change your mail address in your control panel this system never control new mail,usergroup not change to awaiting group.

This is security hole I think.

What is yours idea ?
Reply With Quote
  #103  
Old 12-02-2007, 08:10 PM
Alibass's Avatar
Alibass Alibass is offline
 
Join Date: Mar 2007
Posts: 615
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Bulent Tekcan View Post

If you change your mail address in your control panel this system never control new mail,usergroup not change to awaiting group.
Yes I agree, not good. This allows member to change their email address immediately to a fake one without being checked which really defeats the whole purpose of this hack.
Reply With Quote
  #104  
Old 12-02-2007, 08:13 PM
SBlueman SBlueman is offline
 
Join Date: Jan 2006
Posts: 717
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Wonder if there is a way to:

A) Inject the verification code into the correct filed on the registration page once they click the email link
B) Not allow an email change once the email is registered. Only allow an admin to change that field.
Reply With Quote
  #105  
Old 12-02-2007, 08:19 PM
TigerWare TigerWare is offline
 
Join Date: Feb 2007
Location: England, UK
Posts: 282
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Bulent Tekcan View Post
If you change your mail address in your control panel this system never control new mail.
Quote:
Originally Posted by Alibass View Post
This allows member to change their email address immediately to a fake one without being checked which really defeats the whole purpose of this hack.
With respect, I don't see how this is actually a problem with this modification. This modification is clearly designed (as per the title) to verify an email address before registration is completed. After registration is completed goes beyond the scope of this modification. Thoughts?

This is a very nice modification, well done. :up:
Reply With Quote
  #106  
Old 12-02-2007, 08:30 PM
Bulent Tekcan Bulent Tekcan is offline
 
Join Date: Oct 2003
Location: TURKEY - Istanbul
Posts: 437
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by SBlueman View Post
Wonder if there is a way to:

A) Inject the verification code into the correct filed on the registration page once they click the email link
B) Not allow an email change once the email is registered. Only allow an admin to change that field.
Hehe I have a 350.000 member,if 1000 member needs to change I'll be crazy I think
Reply With Quote
  #107  
Old 12-02-2007, 08:32 PM
Bulent Tekcan Bulent Tekcan is offline
 
Join Date: Oct 2003
Location: TURKEY - Istanbul
Posts: 437
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by TigerWare View Post
With respect, I don't see how this is actually a problem with this modification. This modification is clearly designed (as per the title) to verify an email address before registration is completed. After registration is completed goes beyond the scope of this modification. Thoughts?

This is a very nice modification, well done. :up:
Did you tried this plugin ? Please change you mail after register.Usergroup not change to Awaiting Group,and also new mail fake or real no problem,system accept it.This is not good.
Reply With Quote
  #108  
Old 12-02-2007, 09:48 PM
yahoooh yahoooh is offline
 
Join Date: Oct 2002
Posts: 567
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Bulent Tekcan View Post
Did you tried this plugin ? Please change you mail after register.Usergroup not change to Awaiting Group,and also new mail fake or real no problem,system accept it.This is not good.
this is should be fixed by adding same thing when the user want to change his email


we wait the develper to make it
Reply With Quote
  #109  
Old 12-03-2007, 10:36 AM
papill0n papill0n is offline
 
Join Date: Nov 2007
Posts: 34
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I have installed this and when testing it out when I click to register and tick I have read, and agree to abide by the rules when I click the register button it does nothing but takes me back to where I began
Reply With Quote
  #110  
Old 12-03-2007, 04:54 PM
Nam's Avatar
Nam Nam is offline
 
Join Date: Oct 2001
Location: NY
Posts: 206
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

I thought once the user register, check email and complete the account, everything else will handle by default vb system, this includes when user changing his email, no?

If the user change the email to fake one after registration, but still belong to Registered group, then it is a big flaw.

Otherwise, it's perfect and great idea.
Reply With Quote
  #111  
Old 12-03-2007, 05:15 PM
Alibass's Avatar
Alibass Alibass is offline
 
Join Date: Mar 2007
Posts: 615
Благодарил(а): 0 раз(а)
Поблагодарили: 0 раз(а) в 0 сообщениях
Default

Quote:
Originally Posted by Nam View Post
I thought once the user register, check email and complete the account, everything else will handle by default vb system, this includes when user changing his email, no?

If the user change the email to fake one after registration, but still belong to Registered group, then it is a big flaw.

Otherwise, it's perfect and great idea.
What we have been talking about is if you have vB options>user reg options>Verify Email address in Registration set to 'no' so the new member will not half to verify his/her email a second time via activation link then the user can change their email addy to a fake (via usercp) and they are not ask to reverify their address by putting them in users awaiting email verification group and sending out a email with a activation link for new addy.
Making a new member activate their email address twice during registration sucks and it sucks allowing them to change their address to a fake after registering.
Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT. The time now is 06:52 PM.


Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.
X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.05312 seconds
  • Memory Usage 2,308KB
  • Queries Executed 26 (?)
More Information
Template Usage:
  • (1)SHOWTHREAD
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)ad_showthread_beforeqr
  • (7)bbcode_quote
  • (1)footer
  • (1)forumjump
  • (1)forumrules
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (1)modsystem_post
  • (1)navbar
  • (6)navbar_link
  • (120)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (4)pagenav_pagelink
  • (1)pagenav_pagelinkrel
  • (11)post_thanks_box
  • (11)post_thanks_button
  • (1)post_thanks_javascript
  • (1)post_thanks_navbar_search
  • (11)post_thanks_postbit_info
  • (10)postbit
  • (11)postbit_onlinestatus
  • (11)postbit_wrapper
  • (1)spacer_close
  • (1)spacer_open
  • (1)tagbit_wrapper 

Phrase Groups Available:
  • global
  • inlinemod
  • postbit
  • posting
  • reputationlevel
  • showthread
Included Files:
  • ./showthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/functions_bigthree.php
  • ./includes/class_postbit.php
  • ./includes/class_bbcode.php
  • ./includes/functions_reputation.php
  • ./includes/functions_post_thanks.php 

Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • showthread_start
  • showthread_getinfo
  • forumjump
  • showthread_post_start
  • showthread_query_postids
  • showthread_query
  • bbcode_fetch_tags
  • bbcode_create
  • showthread_postbit_create
  • postbit_factory
  • postbit_display_start
  • post_thanks_function_post_thanks_off_start
  • post_thanks_function_post_thanks_off_end
  • post_thanks_function_fetch_thanks_start
  • post_thanks_function_fetch_thanks_end
  • post_thanks_function_thanked_already_start
  • post_thanks_function_thanked_already_end
  • fetch_musername
  • postbit_imicons
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • postbit_display_complete
  • post_thanks_function_can_thank_this_post_start
  • pagenav_page
  • pagenav_complete
  • tag_fetchbit_complete
  • forumrules
  • navbits
  • navbits_complete
  • showthread_complete