Send spam through user registration

[yoerin]

Steps to reproduce the issue

Set user activation to 'Admin' and allow user registration.

Submit the registration form where the name of the user is spam text and enter an email to spam (use a test email for this ofcourse)

Expected result

No email send to the user

Actual result

The email that is used to register an account receives an email and because the name of the user contains spam text this text is placed in the email.

Additional comments

Ad an option to turn off all emails after registration or putt a variable limitation on the username

[Fedik]

just enable Captcha for registration:

[brianteeman]

the username field is only 30 characters of text - not very useful for sending spam

[Quy]

While the username field has a size attribute of 30, it can be up to 150 characters long.

[brianteeman]

@Quy the database table allows it to be 150 but the "spammer" can still only submit 30 characters

[Quy]

More than 150 characters can be entered but it will be truncated at 150. I created a 150 characters username.

[brianteeman]

I only tested in the admin where you can only submit 30

[Quy]

Ok then the issue is the front end registration allowing up to 150 characters.

[brianteeman]

So that's a bug and will cause issues if a long username is created on the fronted and then edited in the admin. I will take a look at fixing that

[brianteeman]

Sorry my mistake you can enter 150 characters in both admin and frontend - I must have had a different error before that was unrelated

[sandewt]

The Name is up to 400 characters long. Could also be shorter.

Moreover, it can break the layout of the site (backend + frontend) .

See the image.

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/19438.}

[Quy]

Related #14275

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/19438.}

[joomla-cms-bot]

Set to "closed" on behalf of @Quy by The JTracker Application at issues.joomla.org/joomla-cms/19438

[Quy]

Lets discuss in #14275 as it relates to more control over username/email which would address spam abuse as mentioned in this issue.

---

_{This comment was created with the J!Tracker Application at issues.joomla.org/tracker/joomla-cms/19438.}