We're on 4.7.20. We have an extensive ban list of emails and names. Since we upgraded from 3.3.4 on 22 Oct 2024, we have had all of one or two spam registrations.

With that said, we continue to see validation emails being sent through our transactional email system, Mandrill.

Is there any way to trace the source of those validation emails? I can see them going out, and delivered, and thankfully, no registrations.

I just wonder what is generating those emails?

• Is this just the ban setting application doing its job? I would think if there is an email was listed in the banned settings, the form would catch it before it is submitted? Or is this a minor bug, where the ban settings catch the banned email but the validation is sent anyway? Or am I missing the flow process, meaning the email validation is sent and once it is received, and someone tries to click it, the message is delivered that the email is invalid or something?

• We also have a pledge form that people can sign. It sends a confirmation email to the signee's email, indicating that they had signed the pledge, and if someone else (English School Boy Humour) had signed in their place, please click 'here' to cancel the pledge signature. Could these pledge confirmation emails be triggering the registration validation emails at the same time?

Thanks,

Brian

A confirmation email is only sent out for validation, if a user has gotten through the registration process. So it cant be that they are banned and its still sending. The only other thing that could do it is post before register if you have that switched on.

As for the second part there, its not really possible for us to answer that without knowing what that application does

I copied one of the banned emails in the acp and tried to register using that email and just as @Marc described, the registration could not go forward.

Attached are three attachments. The first is the banned list from the acp with the banned email circled. The second is a printscreen of the Mandrill outbound transaction email. I have circled the banned email which was banned several weeks ago. The pencil drawing with the down arrow means I am clicking on the view content. The third attachment is the email that was open when clicked in the Mandrill acp, shows the code of the link embedded in the verify email button.

Is there any way to trace that code back to some transaction that could explain the source of this validation email?

Thanks,

Brian

By the look of that, they are using the contact form to contact. They have to verify their email for that

Aha! Thank you @Marc