Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Make site registration closed by default #5871

Closed
mrclay opened this issue Jul 28, 2013 · 7 comments
Closed

Make site registration closed by default #5871

mrclay opened this issue Jul 28, 2013 · 7 comments
Labels
dev usability easy important spam
Milestone
Elgg 3.0.0-beta

Comments

@mrclay
Copy link
Member

mrclay commented Jul 28, 2013

  1. Anti-spam plugins seem like a requirement now for open public registration, and we should recommend that users install some before opening.
  2. See Clyde K's story. Basically as soon as your site is known to spammers, it's dangerous to have open reg before you can get anti-spam plugins in place.

Granted, reinstalling an established site will probably be rare, but having open reg by default just seems to go against the principle of secure by default.
@mrclay mrclay mentioned this issue Jul 28, 2013
Closed
mrclay added a commit to mrclay/Elgg-leaf that referenced this issue Jan 17, 2014
@mrclay
Fixes Elgg#5871: Close registration by default
4531d9e
@mrclay
Copy link
Member Author

mrclay commented Jan 17, 2014

#6342

mrclay added a commit to mrclay/Elgg-leaf that referenced this issue Feb 9, 2014
@mrclay
feature(install): installer leaves registration closed
d15501b 
Currently site owners installing Elgg on a public site risk being
bombarded with spam registrations before they can install anti-spam
plugins. This creates the site with closed registration by default.

Fixes Elgg#5871
@ewinslow ewinslow added the spam label Apr 18, 2014
@ewinslow ewinslow removed this from the Elgg 1.9.0 milestone May 11, 2014
@ewinslow
Copy link
Contributor

ewinslow commented Sep 2, 2014

Yep, still think this is a good idea. Spam is a major issue...

@jdalsem
Copy link
Member

jdalsem commented Oct 30, 2014

if we still want it, why did we close #6342? What is needed to have this fixed (as it should not be that hard)

@ewinslow
Copy link
Contributor

ewinslow commented Nov 1, 2014

Did you read the whole discussion?

On Thu, Oct 30, 2014, 3:05 PM Jeroen Dalsem notifications@github.com
wrote:

if we still want it, why did we close #6342
#6342? What is needed to have this
fixed (as it should not be that hard)

—
Reply to this email directly or view it on GitHub
#5871 (comment).

@jdalsem
Copy link
Member

jdalsem commented Nov 2, 2014

Yeah, it seems we still want it, but the PR should be extended a little bit with the message after install.

@mrclay mrclay added this to the Elgg 2.0.x milestone Apr 15, 2015
@ewinslow
Copy link
Contributor

ewinslow commented Jul 1, 2015

Not a BC break so not a 2.0 blocker.

@ewinslow ewinslow removed this from the Elgg 2.0.x milestone Jul 1, 2015
@jdalsem jdalsem added this to the Elgg 3.0.x milestone Oct 10, 2016
@mrclay mrclay mentioned this issue Apr 9, 2017
Closed
mrclay added a commit to mrclay/Elgg-leaf that referenced this issue Apr 13, 2017
@mrclay
feature(install): installation changes
76942cf 
Registration is off by default.
Registration/walled garden moved to basic settings.
Basic settings invites user to advanced settings.
New API for safely redirecting to input-given URLs.

- [ ] Elgg#10917 allow admin notices within site
- [ ] installer adds `fresh_install` notice to invite user to basic settings
- [ ] docs
- [ ] make sure installer can use admin notices API

Fixes Elgg#5871
@mrclay mrclay mentioned this issue Apr 13, 2017
Merged
mrclay added a commit to mrclay/Elgg-leaf that referenced this issue Apr 27, 2017
@mrclay
feature(install): installation changes
2da0259 
Registration is off by default.
Registration/walled garden moved to basic settings.
Basic settings invites user to advanced settings.
New API for safely redirecting to input-given URLs.

- [ ] Elgg#10917 allow admin notices within site
- [ ] installer adds `fresh_install` notice to invite user to basic settings
- [ ] docs
- [ ] make sure installer can use admin notices API

Fixes Elgg#5871
mrclay added a commit to mrclay/Elgg-leaf that referenced this issue Apr 27, 2017
@mrclay
feature(install): installation changes
2e326af 
Registration is off by default.
Registration/walled garden moved to basic settings.
On first visit to site, the admin user is welcomed to the basic settings page.
Basic settings invites user to advanced settings.
Adds API for safely redirecting to input-given URLs.

Fixes Elgg#5871
mrclay added a commit to mrclay/Elgg-leaf that referenced this issue Apr 27, 2017
@mrclay
feature(install): installation changes
57ac75e 
Registration is off by default.
Registration/walled garden moved to basic settings.
On first visit to site, the admin user is welcomed to the basic settings page.
Basic settings invites user to advanced settings.
Adds API for safely redirecting to input-given URLs.

Fixes Elgg#5871
@mrclay
Copy link
Member Author

mrclay commented Apr 27, 2017

PR #10918

mrclay added a commit that referenced this issue May 1, 2017
@mrclay
feature(install): installation changes
c1afe84 
Registration is off by default.
Registration/walled garden moved to basic settings.
On first visit to site, the admin user is welcomed to the basic settings page.
Basic settings invites user to advanced settings.
Adds API for safely redirecting to input-given URLs.

Fixes #5871
mrclay added a commit that referenced this issue May 2, 2017
@mrclay
feature(install): installation changes
a8a1b79 
Registration is off by default.
Registration/walled garden moved to basic settings.
On first visit to site, the admin user is welcomed to the basic settings page.
Basic settings invites user to advanced settings.
Adds API for safely redirecting to input-given URLs.

Fixes #5871
mrclay added a commit that referenced this issue May 2, 2017
@mrclay
feature(install): installation changes
0caa556 
Registration is off by default.
Registration/walled garden moved to basic settings.
On first visit to site, the admin user is welcomed to the basic settings page.
Basic settings invites user to advanced settings.
Adds API for safely redirecting to input-given URLs.

Fixes #5871
mrclay added a commit that referenced this issue May 2, 2017
@mrclay
feature(install): installation changes
a634c15 
Registration is off by default.
Registration/walled garden moved to basic settings.
On first visit to site, the admin user is welcomed to the basic settings page.
Basic settings invites user to advanced settings.
Adds API for safely redirecting to input-given URLs.

Fixes #5871
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
dev usability easy important spam
Milestone
Elgg 3.0.0-beta
Development

No branches or pull requests
3 participants
@mrclay @ewinslow @jdalsem