https://bugzilla.wikimedia.org/show_bug.cgi?id=54408
Web browser: ---
Bug ID: 54408
Summary: Configuration to allow account creation only after
confirming email
Product: MediaWiki
Version: 1.22-git
Hardware: All
OS: All
Status: NEW
Severity: enhancement
Priority: Unprioritized
Component: User login and signup
Assignee: [email protected]
Reporter: [email protected]
CC: [email protected]
Classification: Unclassified
Mobile Platform: ---
MediaWiki allows the creation of new accounts before confirming email or in
fact without providing one at all. Email confirmation is purely optional.
This makes sense in the context of Wikipedia and other Wikimedia sites because
these projects made this choice. However, the usual practice in most websites
is to have an account created only after confirming email. It is reasonable to
expect that most 3rd party MediaWiki admins will expect this functionality,
especially when they start seeing dozens of spam accounts created every day.
It's quite trivial for spammers to go through captchas to create new accounts.
I'm sure they can also get a system to confirm emails massively, but at least
that is a higher level of complexity.
If this is not considered for core then an option would be to integrate this
functionality in [[mw:Extension:ConfirmAccount]]. This extension does require
email confirmation, but admins must approve all requests manually. Besides, the
project seems to be unmaintained...
--
You are receiving this mail because:
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
