solved Signup Hold Process

Dazed
Dazed
@dazed
9 years ago
1,022 posts
I have spammers that are signing up through social media links and they are automatically authorized. This step bypasses the signup filters.

What I would like is a module that would read the ban criteria prior to the being authorized. We could then send an email that the account is under review if it finds a match.

I could do the admin authorization but that is a pain and from what I have seen, that does not authorize the email. I could get mre spammers letting random people through.
updated by @dazed: 02/16/16 01:39:15PM
brian
@brian
9 years ago
10,148 posts
Dazed:
I have spammers that are signing up through social media links and they are automatically authorized. This step bypasses the signup filters.

This is correct - the assumption is that if a user has already validated through Facebook/Twitter/whatever, then that means their email address is correct, and they would be able to validate using it on YOUR site.

Quote:
What I would like is a module that would read the ban criteria prior to the being authorized. We could then send an email that the account is under review if it finds a match.

I could do the admin authorization but that is a pain and from what I have seen, that does not authorize the email. I could get mre spammers letting random people through.

Something like this may not be a bad idea, but I think you know this is a game that you're going to have to remain vigilant at - it's not like all spammers registers with the same email address from the same domain...


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
Dazed
Dazed
@dazed
9 years ago
1,022 posts
Thanks Brian. They typically use the same word in the name so I would ban that word and not necessarily the email. What is annoying is that OneAll has "x" number of Free Access Accounts and then it goes to a subscription model. I am deleting these same accounts every few days so they are just killing the OneAll social media signup.
michael
@michael
9 years ago
7,750 posts
Dazed:....What is annoying is that OneAll has "x" number of Free Access Accounts and then it goes to a subscription model. I am deleting these same accounts every few days so they are just killing the OneAll social media signup....

That sounds like something oneall would like to know about. Maybe they have a way to implement a ban on their end before it starts counting against the free amount.

If there was an API for that check it might be able to be checked against with the JR Ban module.

--edit--
Seams like we get access to the details before going to oneall:
http://docs.oneall.com/services/workflow/social-login/

Might be able to go through the JR ban system before processing.
updated by @michael: 10/30/15 07:53:56PM
Dazed
Dazed
@dazed
9 years ago
1,022 posts
Actually I posted on their forum yesterday so was hoping for a reply sometime this weekend. If you guys can tie into their api and have it route through the ban system, that would be ideal.
brian
@brian
9 years ago
10,148 posts
Dazed:
Actually I posted on their forum yesterday so was hoping for a reply sometime this weekend. If you guys can tie into their api and have it route through the ban system, that would be ideal.

They have a ban system?


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
Dazed
Dazed
@dazed
9 years ago
1,022 posts
Not yet. I am hoping my post will inititate one. If this continues, I would almost prefer to drop OneAll and just go with regular signups. At least I can control it better that way, at the loss of the user experience though.
brian
@brian
9 years ago
10,148 posts
Dazed:
Not yet. I am hoping my post will inititate one. If this continues, I would almost prefer to drop OneAll and just go with regular signups. At least I can control it better that way, at the loss of the user experience though.

OK - let us know if they get back to you.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
Dazed
Dazed
@dazed
9 years ago
1,022 posts
Brian - Just a thought here. After the user signup is complete, could you run a search from the ban items? I went to change the profile to "Inactive" and had "Your entry contains the following text which is not allowed: "berkeley taxi"". So I am not able to change it to inactive because it is listed in the ban section.

So considering this, what is to stop Jamroom from scanning the Ban Items after a social signup and setting a profile to inactive if a match is found? We can then send an email to the Admin and User.

Thoughts?
brian
@brian
9 years ago
10,148 posts
Dazed:
Brian - Just a thought here. After the user signup is complete, could you run a search from the ban items? I went to change the profile to "Inactive" and had "Your entry contains the following text which is not allowed: "berkeley taxi"". So I am not able to change it to inactive because it is listed in the ban section.

So considering this, what is to stop Jamroom from scanning the Ban Items after a social signup and setting a profile to inactive if a match is found? We can then send an email to the Admin and User.

Thoughts?

Sure - pretty much anything could be setup to work specifically how you want it to work - it's not setup to work that way right now though.


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
Dazed
Dazed
@dazed
9 years ago
1,022 posts
Obviously understood but the question becomes how difficult would this be to implement and is it something that would be considered?
brian
@brian
9 years ago
10,148 posts
Try the latest version of the OneAll module - I've updated it so if a user comes in via OneAll and their username or email is banned, it sets their account as inactive and sends admins an email letting them know an account is pending (basically the same as if you had admin validation enabled).

Hope this helps!


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
Dazed
Dazed
@dazed
9 years ago
1,022 posts
Hey Brian that is awesome! This I did not expect. How difficult was it to do?
brian
@brian
9 years ago
10,148 posts
Dazed:
Hey Brian that is awesome! This I did not expect. How difficult was it to do?

It wasn't difficult - I think it was the easiest yet best route to take :)


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net
Dazed
Dazed
@dazed
9 years ago
1,022 posts
Brian - Just wanted to let you know that Berkley Taxi signed up again last night. Everything worked well :). Thanks again for putting this fix in.
brian
@brian
9 years ago
10,148 posts
Dazed:
Brian - Just wanted to let you know that Berkley Taxi signed up again last night. Everything worked well :). Thanks again for putting this fix in.

Glad to hear it :)

Thanks!


--
Brian Johnson
Founder and Lead Developer - Jamroom
https://www.jamroom.net