Hi, I have problem dealing spam accounts, they are created through local accounts, If I look into one spam account, it says primary email not verified, I want to disable this kind of accounts to create a new Topic until they verify their email, how to achieve this?

If their emails aren’t verified then they shouldn’t be allowed to post. Are they staged users? (That is, do you allow anonymous users to email in?)

That is, do you allow anonymous users to email in? how to check this? there is a settings enable staged users which says Automatically create staged users when processing incoming emails. and it is checked. is this what you are asking? [discourse-meta-0] This is how that spam account permissio…

It doesn’t look like that’s a staged user. I’m not sure how people are logging into your site with an unactivated account. Do you have any special login methods?

Do you have any special login methods? Only two methods, local login and google oauth. I’m pritty sure he is not using google his domain is not under gmail. I see there is another thread with similar issue as mine [image] Enable Email Verification to Prevent Spam Su…

Ah yes, we discussed that further in PM. That was down to SSO not verifying the emails before passing them to Discourse.

How can I proceed further to find the root cause of this issue? should I contact you (or someone) through DM?

No, you’re best off having a public topic so other people can weigh in with ideas if they have some. :+1: I’m afraid I don’t have many more ideas for what has happened. Did someone deactivate their account after they posted? (You can check your staff action logs for ‘deactivate user’)

Yes, I deactivated that account after I saw that account created one spam topic, nginx’s access.log didn’t show any new topic activity either from this user. I’m really confused how this guy creating new topic without using web interface, there should be some other way to create topic other then the…

If you deactivated the account then that would explain why the email is unverified (them needing to reverify their email is part of the deactivation)

No, the account posted a spam topic first with unverified email, thats why I deactivated that account.

Disable unverified users to create topic

Product Support

Mohan43u (Mohan Raman) July 26, 2024, 1:58pm 18

do we have any logs which can give some clue? apart from nginx logs.

Topic		Replies	Views
Enable Email Verification to Prevent Spam Product Support	10	646	July 26, 2024
Remove email verification Product Support	5	1496	March 16, 2022
Auto-activate new users Product Support	25	4992	September 21, 2020
Activating users without email? Product Support	14	2814	December 4, 2018
Disabling email verification Product Support	4	2501	September 8, 2020

Disable unverified users to create topic

Related topics