How can I stop spammers from posting with ConfirmEmail accounts?

Bilge

Spammers can post on their own profile page even without confirming their email. There does not seem to be a setting in the roles & permissions page to disable this. How can I stop people abusing ConfirmEmail accounts to post malware links on their wall?

hgtonight

Disable Activity.View and Profile.View permissions for Guests, uncomfirmed email, and applicant roles.

businessdad

@Bilge said:
Edit was not enabled. Only view was enabled and yet they could still post.

Then I'm sure it was due to what I wrote in the post I linked. There's a way to post to Activity that just requires the Activity.View permission.

hgtonight

Disable Activity.View and Profile.View permissions for Guests, uncomfirmed email, and applicant roles.

Bilge

I guess this is a huge misnomer, then, because I have no problem with them viewing profiles, I just don't want them posting on them.

peregrine

I guess this is a huge misnomer, then, because I have no problem with them viewing profiles, I just don't want them posting on them.

vanilla version you using?

businessdad

@hgtonight said:
Disable Activity.View and Profile.View permissions for Guests, uncomfirmed email, and applicant roles.

I think it's "Profile.Edit" permission.

@Bilge, also have a look at Vanilla 2.0.x - One way spammers manage to post to Activity, because there is more than one way to post to one's profile.

peregrine

,

hgtonight

Profile edit and profile view are both required in 2.0.18.10 according to this: https://github.com/vanillaforums/Garden/blob/Vanilla_2.0.18.10/applications/dashboard/controllers/class.profilecontroller.php

Good call @BusinessDad

Bilge

Edit was not enabled. Only view was enabled and yet they could still post.

Bilge

Not only that, but edit cannot be enabled for those roles, as the checkbox is missing entirely.

businessdad

@Bilge said:
Edit was not enabled. Only view was enabled and yet they could still post.

Then I'm sure it was due to what I wrote in the post I linked. There's a way to post to Activity that just requires the Activity.View permission.

Bilge

@businessdad said:
There's a way to post to Activity that just requires the Activity.View permission.

Why is that not considered broken?

businessdad

@Bilge said:
Why is that not considered broken?

Perhaps it was never spotted. I reported it as a bug the same day I wrote the post I linked, I reckon that the Vanilla team will fix it.

hgtonight

@Bilge said:
Why is that not considered broken?

It is fixed in 2.1, IIRC. Some people see it as a feature.

Bilge

@hgtonight said:
Some people see it as a feature.

Only the blind.

peregrine

Only the blind.

People without myopia would have found the answer by searching the forum, it is discussed in numerous places. There is a github to push your requests and specify perceived bugs as mentioned before as well as a beta version for people capable of working with it. Kind of like complaining about why visicalc no longer works in the latest OS systems.

just re-hashing old issues on the forum and a way to gripe.

.http://vanillaforums.org/discussion/comment/196127/#Comment_196127

just takes a bit of logical thinking to re-apply concepts.

this a great post to exemplify

• the lack of gratitude for help
• the lack of specifying version of vanilla
• the lack of clicking a reaction
• the lack of submitting problem on github.
• and the lack of searching for answer on forum.
• and a great way to continue griping.

anyone interested in reading these may gain some insights.

http://vanillaforums.org/discussion/25115/how-to-how-can-a-new-user-better-help-the-community-when-asking-a-question

http://vanillaforums.org/discussion/23130/forum-post-ettikett-etiquette

http://vanillaforums.org/discussion/17954/food-for-thought-forum-etiquette

http://vanillaforums.org/discussion/23483/advice-for-all-those-just-starting-out-with-vanilla