Duplicaten van e-mailsjablonen met verkeerde inhoud

Is normal that I have duplicated templates in the email settings?

This bug was found because the confirmation link of adding a second email allways returned a 404, then we found that many entries in the templates of email were wrong, so duplicated subjects with similar bodies, they seem to be old contents not replaced?

On the email confirmation issue, I have one that uses a wrong (old?) link and another one that is the correct one, why I have 2 with the same name and why I cannot delete the wrong one? is this a bug in Discourse?

In fact I have multiple duplicated entries (templates) with different contents :thinking:

Which doesn’t me allows to delete them, so no delete button, and if i remove the contents I get an error like this one:

1 like

I was confused by the two confirm new email templates too. But they are slightly different. One is sent when an admin adds a new email address to a user’s profile, and the other one is sent when they do it themselves. The last line is different.

Confirm your new email address for %{site_name} by clicking on the following link:

%{base_url}/u/confirm-new-email/%{email_token}

If you did not request this change, please contact a [site admin](%{base_url}/about).
Confirm your new email address for %{site_name} by clicking on the following link:

%{base_url}/u/confirm-new-email/%{email_token}

This email change was requested by a site admin. If you did not request this change, please contact a [site admin](%{base_url}/about).

I think deleting one would break one of the emails sent.

My templates also both use the same link. Maybe yours differ because you had customized the template before.

I wonder why parts of the link are customizable by the template. If the template only used %{confirmation_link}, from my understanding, the link wouldn’t become outdated even if the template was customized.

Niet helemaal, ik heb meerdere gedupliceerde met vergelijkbare inhoud, in mijn screenshotvoorbeeld (misschien niet zichtbaar) verwijst een van de links naar “confirm-new-email” (correct) en de andere naar “authorize-email” (wat een gebroken / niet-bestaande link is)

Kunt u ons een paar meer screenshots (of een video) laten zien om het probleem dat u ervaart uit te leggen? U moet meer informatie verstrekken om ons te kunnen helpen.

Misschien is het antwoord simpelweg om alle e-mailsjablonen terug te zetten naar de standaardinstellingen en dan opnieuw te beginnen met het aanpassen ervan als u dat echt nodig acht.

How to do that?

Ok I recorded this video, sorry for the low volume of the mic: https://www.youtube.com/watch?v=kVnqpC7T9pQ

Klik op de e-mailinstellingenbeheerpagina in elke e-mailsjabloon en selecteer vervolgens de knop Wijzigingen ongedaan maken. Als deze al standaard is, is er geen knop voor wijzigingen ongedaan maken.

Ik heb die YouTube-video bekeken en zie dat veel van de e-mailsjablonen verschillen van wat de huidige standaard is. Kunt u bevestigen dat u uw site up-to-date houdt?

It looks like you had customized one of them by adding

Sometimes our emails are marked as SPAM, mark this email as important and drag it to your Principal section to make the delivery more reliable. This will also help other users to receive notifications correctly. Remember that you can always unsubscribe.

That is not part of any of the default templates. So I guess you have the same problem as in this topic Confirmation email link (after change) is broken ("Oops!") due to bad email customization - #5 by gerhard. Whenever you customize a text Discourse won’t overwrite it when the original is updated. The software can’t know how to “merge” your customizations with the new changes.
So you need to update your customized text on your own, or reset it to the default text as Tobias suggested, and then customize it again if you want to.

But as I explained before Discourse uses both templates. It won’t send the other one if you deleted one of them. It will still use that template which was created for the current situation. So whenever the user changes their email it uses the template for that. The other template is used when the admin changes the user’s email. Different situations require different texts, so there are different templates.

Also in the case of the 2 templates for ‘account silenced’ and ‘account suspended’ both templates are needed and it would be a bad idea to delete one. The two templates have slightly different use cases: one is sent when the user is silenced or suspended for a limited time. That’s why it includes the date. The other template is used when you choose to silence/suspend the user forever. In this case, the email doesn’t tell the user that they are “suspended untill the year 3025”. That would be silly. So there is a second template without the placeholder for how long the account is suspended/silenced.

1 like

Ah! I see now the revert button

Im cleaning up all the modified templates one to one, but this particular one “Reviewables Reminder” gives me an error, im the only one to have this issue?

That was fixed recently. You need to update your forum to get the fix.

I think you can also reset the text at admin/customize/site_texts by searching for system_messages.reviewables_reminder

1 like

Ok so I changed the “authorize-email” wrong link to the correct one and a few hours later I received again spam:

It is normal that discourse installations receives spambots that way? I don’t think so
 but why changing this confirmation email makes spambots to attack the forum?

What is even more confusing is that I don’t see any logs from them, in fact there’s no “new registered users” (even more confusing the relation of that confirmation link here):

So where these spambots come from? looking at one of them it looks like it was created in 2020, ok


Question: when the post is flagged (so I added many keywords on the flag list), what is the correct action for the spammy accounts? (delete all his posts, delete account, delete traces, etc).

On the other hand I see that the user has 11 posts created, on his profile I see the option to “delete all posts” but not to “see” them (very needed link), how I can see which posts the user created? In fact it looks to be a legit user (on his first post from 2020, so the account of this user was hacked on discourse?)

Back to the topic, I still confused what can be the relation of the confirmation link with these spam actions, but I just seen that a NEW user was created 32 minutes ago trying to spam gibberish: