Validating Malicious registration names show as NEW MEMBERS

[mick2me]

Support Ticket response, posted in this area on IPB support request.

We have a problem with persons registering dozens of obscene names to disrupt the board.
These names show on the bottom of the board in the area 'Newest Member' and are visible to all site visitors, even thought they have not verified their email address and been Admin approved.

Can it be set that new members only show in that area once approved by admin?


Today, 08:00 AM
Staff: Andy
Hello,

After checking this myself on my test board validating members will not show in the newest member section by default but will if you move them to the banned group apparantly.

Validating members do, however, show in the member list unless you specifically edit the group to alter this setting. I see you have already done this so am I right in thinking that currently the only public viewable location of these members is in the "newest member" field at the bottom of your board?

If that is the case this is not strictly a bug in the software. However, I think it would make sense to also hide the group from that field if you have set the group to hide from the member list.

I would advise you post this as a feature suggestion in the company forums at http://community.invisionpower.com/forum/298-ipboard/ where it will get the attention it deserves from the board developers.

I note somebody else has also made such a suggestion here...

http://community.invisionpower.com/topic/3...ed-individuals/

In the meantime while you wait for an inbuilt feature you could remove that field from your skin by performing the following edit...

In ACP > Look & Feel > Your Skin > Templates > Board Index > boardIndexTemplate

find and delete...

<dt>{$this->lang->words['newest_member']}</dt>
<dd><a href='{$stats['info']['last_mem_link']}' title='{$this->lang->words['view_profile']}'>{$stats['info']['last_mem_name']}</a>{parse template="user_popup" group="global" params="$stats['info']['last_mem_id'],$stats['info']['last_mem_seo']"}&nbsp;</dd>

Regards,
Technical Support
Invision Power Services

[mick2me]

Can confirm that some admins have seen the obscene validating names and moved them to the banned group.
We do not delete these users as the IP addresses are evidential.

I have removed 'new members' from display as advised above.

Suggestion
Banned members and validating members should not be visible in the normal members list.

[Wolfie]

Suggestion

Banned members and validating members should not be visible in the normal members list.

Only those who have been fully validated should show up there, that's my opinion.

[Andy Millne]

The problem here appears to be that if you move them to a separate banned group you are in fact effectively validating them. Having the "hide from member list" group setting also hide from this field would be a good solution I feel.

[Biker.GA]

Don't care how it's accomplished, but banned and validating are not really "members" per se, and really shouldn't show in the "Newest Member" heading.

[Painted Horse]

Don't care how it's accomplished, but banned and validating are not really "members" per se, and really shouldn't show in the "Newest Member" heading.

Shouldn't be counted or show up in the member list either, imo.

[Biker.GA]

Agreed....

[Abomination]

Great suggestions.

Could a temporary work around be for the admins to change the names when moving members from validating to banned? To eliminate the obscene part?

[Andy Millne]

If you use the built in ban member method...

http://screencast.com/t/ZjQyOGZmZDMt

Then they won't be removed from the validating group so there should be no issue. It's only if members are moved out of the validating group there is a problem.

I do think that the hide from members list option should also apply to the newest member field though if you have it set for a group.

[Wolfie]

I do think that the hide from members list option should also apply to the newest member field though if you have it set for a group.

Only if it's their primary group, not secondary.

[mick2me]

It should be written into the code that Banned/validating members should by default not be visible anywhere?
That would save everyone having to reset these values in ACP.
Many will only find the need to do this when they are targeted like we are being targeted.

These people have found a weakness in the code and are exploiting it to great effect!

Currently even admins cant see who is online.