# Invite tokens accepted and ROT13 transformed

**URL:** <https://meta.discourse.org/t/invite-tokens-accepted-and-rot13-transformed/90316>\
**Category:** Support\
**Created:** [6월 20, 2018, 2:40오후 UTC](https://meta.discourse.org/t/invite-tokens-accepted-and-rot13-transformed/90316 "2018-06-20T14:40:53Z")\
**Posts on this page:** 1\
**Showing post:** 6

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [6월 21, 2018, 2:54오전 UTC](https://meta.discourse.org/t/invite-tokens-accepted-and-rot13-transformed/90316/6 "2018-06-21T02:54:25Z")

</div>

Hmm @techAPJ a GET request should never redeem an invite, we should require one more click here, is that not the case?

Then the easy fix is just say not valid if the email address has no @ in it, plus it would not be redeemed anyway

---

_[View the full topic](https://meta.discourse.org/t/invite-tokens-accepted-and-rot13-transformed/90316)._