September 4, 2005 in Feedback
For security purposes it would be nice when users are creating thier accounts in a 2.1+ IPB forum that there was an option to force them to select different names for thier login name and forum display names. Much harder to hack an account if you don't know the proper user name.
If a member is required to have different names for registration & display, it should be noted on the registration page so they won't use the name that they want shown on their posts when they register.
Last I checked the page you select your display name and login name were the same page. Any pre 2.1 forum accounts would have to be grand-fathered in, unless a way was made for people to change thier login names (this wouldn't be that bad an idea either, I wouldn't care if my users changed thier login names, as long as thier display name stayed the same)
Why not just have them login with their email address - that way they will remember to update their account if they change it.
Upon further examination I found this:
Prohibit Display Names from selecting Log In names
If "yes", one is not able to choose a display name that is the same as another's display name OR another's log in name. If "no" one is not able to choose a display name this is the same as another's display name only.
under the converge set up option tree, however this doesn't stop them from chosing the same name for display and login during registration, unless somebody already has one or the other... Seems if this option is checked then during registration the two should be checked against each other as well
This topic is now archived and is closed to further replies.
Started 17 hours ago
Started 21 hours ago
Started 23 hours ago