Closed owen2 closed 12 years ago
There is a flag in the config ALLOW_ANY_EMAIL that should lock down the signup to people only with addresses at Settings::$ValidEmailDomain
People without those addresses can still sign up even when allow_any_email is false.
Should be fixed, created Settings::restrictDomain to flag domain restriction. I took the public method out because the dashboard.php is the only script where the old isEmailAllowed method would be used.
There is a flag in the config ALLOW_ANY_EMAIL that should lock down the signup to people only with addresses at Settings::$ValidEmailDomain
People without those addresses can still sign up even when allow_any_email is false.