Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
How can I stop spammers from posting with ConfirmEmail accounts?
Bilge
New
Spammers can post on their own profile page even without confirming their email. There does not seem to be a setting in the roles & permissions page to disable this. How can I stop people abusing ConfirmEmail accounts to post malware links on their wall?
0
Best Answers
-
hgtonight
MVP
Disable Activity.View and Profile.View permissions for Guests, uncomfirmed email, and applicant roles.
Check out the Documentation! We are always looking for new content and pull requests.
Click on insightful, awesome, and funny reactions to thank community volunteers for their valuable posts.
5 -
businessdad
MVP
Answers
Disable Activity.View and Profile.View permissions for Guests, uncomfirmed email, and applicant roles.
Search first
Check out the Documentation! We are always looking for new content and pull requests.
Click on insightful, awesome, and funny reactions to thank community volunteers for their valuable posts.
I guess this is a huge misnomer, then, because I have no problem with them viewing profiles, I just don't want them posting on them.
vanilla version you using?
I may not provide the completed solution you might desire, but I do try to provide honest suggestions to help you solve your issue.
I think it's "Profile.Edit" permission.
@Bilge, also have a look at Vanilla 2.0.x - One way spammers manage to post to Activity, because there is more than one way to post to one's profile.
My shop | About Me
,
I may not provide the completed solution you might desire, but I do try to provide honest suggestions to help you solve your issue.
Profile edit and profile view are both required in 2.0.18.10 according to this: https://github.com/vanillaforums/Garden/blob/Vanilla_2.0.18.10/applications/dashboard/controllers/class.profilecontroller.php
Good call @BusinessDad
Search first
Check out the Documentation! We are always looking for new content and pull requests.
Click on insightful, awesome, and funny reactions to thank community volunteers for their valuable posts.
Edit was not enabled. Only view was enabled and yet they could still post.
Not only that, but edit cannot be enabled for those roles, as the checkbox is missing entirely.
Then I'm sure it was due to what I wrote in the post I linked. There's a way to post to Activity that just requires the
Activity.Viewpermission.My shop | About Me
Why is that not considered broken?
Perhaps it was never spotted. I reported it as a bug the same day I wrote the post I linked, I reckon that the Vanilla team will fix it.
My shop | About Me
It is fixed in 2.1, IIRC. Some people see it as a feature.
Search first
Check out the Documentation! We are always looking for new content and pull requests.
Click on insightful, awesome, and funny reactions to thank community volunteers for their valuable posts.
Only the blind.
People without myopia would have found the answer by searching the forum, it is discussed in numerous places. There is a github to push your requests and specify perceived bugs as mentioned before as well as a beta version for people capable of working with it. Kind of like complaining about why visicalc no longer works in the latest OS systems.
just re-hashing old issues on the forum and a way to gripe.
.http://vanillaforums.org/discussion/comment/196127/#Comment_196127
just takes a bit of logical thinking to re-apply concepts.
this a great post to exemplify
anyone interested in reading these may gain some insights.
http://vanillaforums.org/discussion/25115/how-to-how-can-a-new-user-better-help-the-community-when-asking-a-question
http://vanillaforums.org/discussion/23130/forum-post-ettikett-etiquette
http://vanillaforums.org/discussion/17954/food-for-thought-forum-etiquette
http://vanillaforums.org/discussion/23483/advice-for-all-those-just-starting-out-with-vanilla
I may not provide the completed solution you might desire, but I do try to provide honest suggestions to help you solve your issue.