Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

Safety when removing the email activation?

  • Participant
    Level: Yogi
    Posts: 1117
    calu on January 16, 2019 at 5:07 pm #20312

    Hi Brajesh, I am considering purchasing , BuddyPress Auto Activate Auto Login, but came to think about the safety an activation key provides.
    Without this email confirmation, users can use an email, not belonging to themselves, or @example.com for sending numerous emails.

    I really would like to to improve the user experience when signing up, by removing the email activation, but what are your thoughts about the safety issue?

    Regards
    Carsten

  • Keymaster
    (BuddyDev Team)
    Posts: 24712
    Brajesh Singh on January 16, 2019 at 10:13 pm #20319

    Hi Carsten,
    Thank you for the question.

    I do understand your concern and yes, There is a possibility of misuse.

    I think in future, an option to verify email even after logging to the site(like other networks do), might help with this verification.

    The current implementation does not support it.

    Regards
    Brajesh

You must be logged in to reply to this topic.

This topic is: not resolved