Chepkeitany / django-profile

Automatically exported from code.google.com/p/django-profile
BSD 2-Clause "Simplified" License
1 stars 0 forks source link

E-mail validation required on registration #20

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
Make the e-mail validation required on account registration.

This could be made optional adding a variable on settings.py:

EMAIl_REGISTRATION_REQUIRED = [True || False ]

Original issue reported on code.google.com by david.ru...@gmail.com on 3 Jul 2008 at 8:23

GoogleCodeExporter commented 9 years ago

Original comment by dahaboa...@gmail.com on 6 Sep 2008 at 2:29

GoogleCodeExporter commented 9 years ago
status? seems to work fine in my testing.

Original comment by ericd...@gmail.com on 22 Nov 2008 at 4:24

GoogleCodeExporter commented 9 years ago
I implemented an initial version 2 weeks ago. It seemed to work ok, but comment 
if
there's anything left, because I'm not using this for my site.

Original comment by david.ru...@gmail.com on 27 Nov 2008 at 5:47

GoogleCodeExporter commented 9 years ago
This isn't working for me. You set user.is_active false if you require a 
validating
email, but you never set it to true again once you receive it. I've attached a 
small
patch which I will be using to fix the issue, but I think it opens up some 
security
flaws, if the user has been de-activated for some other reason.

Also, registration_done.html should give an a more appropriate message when this
option is set. Or at least inform users that this needs to be overrided.

Original comment by sadwanm...@gmail.com on 6 Dec 2008 at 6:22

Attachments:

GoogleCodeExporter commented 9 years ago
Thanks, I have commit your patch, and modify the registration_done.html 
template to
show the correct message if the validation_required functionality has been 
activated.

About the security flaws, you're totally right. Maybe a solution will be 
re-active
the account only if the profile hasn't been created yet (first time user).

Original comment by david.ru...@gmail.com on 6 Dec 2008 at 9:41