search

Nakiami / mellivora

Mellivora is a CTF engine written in PHP
GNU General Public License v3.0
442 stars 170 forks source link

Account mail confirmation #137

Open nioupola opened 4 years ago

nioupola commented 4 years ago

Hello,

I want to know if the current version has any mechanism to validate the user email that is used to create the account? If not, I will work on it to implement it.

Thanks in advance.

Nakiami commented 4 years ago

Hi, what do you mean by validate? There is validation done on sign-up to make sure it looks like a real email address. You can also use regex rules to limit which emails can sign up. See https://github.com/Nakiami/mellivora/blob/master/include/email.inc.php

nioupola commented 4 years ago

Hey, I used the regex with success. But, I would like to send a confirmation to check if the mail is currently existing and valid. I setup mellivora for a CTF (thanks again for create and maintain it :heart: ) but we got some users enter non-existing mail addresses after figure out what was the regex. Some website send a link to the mail address with a token to confirm the account and let the user use it to login and access the website.

Nakiami commented 4 years ago

Aha, I see what you mean. No, this feature does not exist. Feel free to contribute :)

nioupola commented 4 years ago

Ok, I will try to implement it and I will make a PR after :). Thanks for the reply.