 People who sign up still have considerable access to the site while they are awaiting activation. How do I stop this? In my case, the point of activation is to determine who is suitable to have access to the site, so it is not desirable to allow people any access until they have been activated. |
I must confess the more I look at this the more I am alarmed. The entire point of having a login is to keep non-members out of the site! Yet all they have to do is create a phoney login and they can access vast amounts of the existing members data before they are activated! This explains why we get so many phoney accounts created every day. We get anything up to ten accounts created - purely so they can surf the member information. It should not be possible to log on until an account has been activated!! This is an absolutely crazy security hole!
|
Check this modification and see if it helps; |
Hi, I implemented the changes and the join processor modification results in an error message. However the other modifications seem to work OK. The only minor problem with all of this is that it then results in a page being displayed that says "access denied" and really it could do with something that tells people that they need to be confirmed. Is there a way to modify the "access denied" page? |
