-
-
Notifications
You must be signed in to change notification settings - Fork 955
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add way to delete spam/unused users #8470
Comments
I've found REGISTRATION_CAPTCHA, this should definitely be enabled by default or highlighted in tutorials. I've done |
weblate/weblate/accounts/models.py Lines 77 to 78 in d60ef3b
|
This issue has been automatically marked as stale because there wasn’t any recent activity. It will be closed soon if no further action occurs. Thank you for your contributions! |
"A computer can never be held accountable, therefore a computer must never make a management decision" |
What accountability you have isn't helped by turning that off…? |
This issue has been put aside. It is currently unclear if it will ever be implemented as it seems to cover too narrow of a use case or doesn't seem to fit into Weblate. Please try to clarify the use case or consider proposing something more generic to make it useful to more users. |
I was commenting on the stale issue bot I have REGISTRATION_CAPTCHA enabled but it doesn't seem to be that effective. My instance has 1370 registered users, but only a few of those are legitimate |
The captcha implementation is pretty basic right now, see also #1462. |
Describe the problem
My weblate instance has been targeted by a large number of spammy sign ups. Automated bots create accounts to link to their websites. Due to
rel=ugc
, this won't actually help their SEO. But it may be resulting in my website being seen as less trustworthy (I've been banned from Bing recently for some unknown reason), and having a large number of fake users is annoyingDescribe the solution you'd like
There should be a way to delete spam/unused users. The criteria could be not a member of a project, never contributed to the project, and not used their account within a set period of recency
Describe alternatives you've considered
It would also be good to have better checks to prevent spammy sign ups.
Or perhaps a way to disable user profiles completely
Screenshots
No response
Additional context
My instance is at https://weblate.rubenwardy.com/
The text was updated successfully, but these errors were encountered: