Is there a way to disable email-only signup? I would like to set up so that signup can only be via GitHub, Twitter or Discord.
I have a user who is using VPNs to repeatedly log in and troll or post 4h1t content.
With posts like these, lol:
Also open to alternative approaches, plugins or solutions. Thanks!
You can disable email-only login (site setting: enable_local_logins) but I don’t think you can disable only local signups.
Thanks. Sounds like this may lock out at least some existing members? And login security or user moderation plugins available that can help with this?
I know people have had a lot of success using the anti-spam AI module?
What if you hid the email signup fields and replaced them with them pointing them to login with OAuth providers?
There is the fingerprinting option not sure if that would work for you:
If you’ve already banned their I.P. and e-mail vpn wouldn’t make any difference if they use the same e-mail, but guess they are using different e-mails and I.P.s then so ban isn’t working.
Don’t know what “4h1t” means, that is a strange post there Ammonia and Bleach are definitely not safe to be mixed that generates toxic gasses.
I would like to second this, it is free (using Gemini for example) and you could have custom instructions that block even if the troll becomes more sophisticated.
The trolls experience would be quite bad as well, cause they would get block right away and only you would see the spam in your queue which you can easily delete.
Ok I may give this a try. It’s not officially supported though. Safe to use in production?
Can you expand on the question here? I am not following, are you saying Gemini is not officially supported?
I think I misunderstood. Please ignore my ignorance. 
So to make use of this I need to install this plugin: Discourse AI
Then, follow this guide?: Discourse AI - Spam detection
Let me know if I understand correctly.
