# Stop making it so easy for suspended users to create puppet accounts

**URL:** https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780
**Category:** UX
**Created:** [Fevereiro 18, 2016, 6:52am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780 "2016-02-18T06:52:45Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [Fevereiro 18, 2016, 6:52am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/1 "2016-02-18T06:52:46Z")

</div>

I don’t know if many sites have a problem with multiple accounts.  
Nor do I know if this would be desirable to do or an easy fix

It seems to me having “create new account” on a suspended users login modal is kind of “asking for it”

 ![](https://global.discourse-cdn.com/meta/original/3X/6/5/6548872aa39c0756ae2634f96844575d463b8d0e.png)

---

<div class="post-metadata">

### Author: ![Carson1](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/carson1/32/51212_2.png) [@Carson1](https://meta.discourse.org/u/Carson1)
#### Post date: [Fevereiro 18, 2016, 8:25am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/2 "2016-02-18T08:25:23Z")

</div>

Oh, we have the problem a lot. I’d say about 1/3 people we suspend decide to make another account. I just delete that account and lengthen the user’s ban.

---

<div class="post-metadata">

### Author: ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [Fevereiro 18, 2016, 8:29am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/3 "2016-02-18T08:29:54Z")

</div>

I doubt if removing it from the modal will stop many. But on the other hand, why give them a hint if they didn’t think of doing it themselves.

---

<div class="post-metadata">

### Author: ![Carson1](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/carson1/32/51212_2.png) [@Carson1](https://meta.discourse.org/u/Carson1)
#### Post date: [Fevereiro 18, 2016, 9:14am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/4 "2016-02-18T09:14:16Z")

</div>

How would it be removed? It wouldn’t know the user has been suspended until he tried to sign in.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [Fevereiro 18, 2016, 9:19am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/5 "2016-02-18T09:19:23Z")

</div>

Instead of that error redirect to google 👹

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [Fevereiro 18, 2016, 9:53am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/6 "2016-02-18T09:53:19Z")

</div>

> [@sam](#):
>
> Instead of that error redirect to google

All jokes aside, could the error be in a desperate dialog as opposed to being displayed above the credential input boxes? Close the Log In dialog, pop up another dialog that displays the message regarding account suspension.

---

<div class="post-metadata">

### Author: ![Mittineague](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mittineague/32/114259_2.png) [@Mittineague](https://meta.discourse.org/u/Mittineague)
#### Post date: [Fevereiro 18, 2016, 10:04am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/7 "2016-02-18T10:04:37Z")

</div>

> [@Carson1](#):
>
> It wouldn’t know the user has been suspended until he tried to sign in.

Yes, I hadn’t thought of that.  
“create new account” would be there - as it should in case login was clicked by mistake.  
Then after the failed attempt it could be gone.

> [@jomaxro](#):
>
> Close the Log In dialog, pop up another dialog that displays the message regarding account suspension.

I like that idea much better.

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [Fevereiro 18, 2016, 10:38am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/8 "2016-02-18T10:38:27Z")

</div>

We could even ban an IP from creating accounts for a day or two once a suspended account tried to log in from it… :troll:

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [Fevereiro 18, 2016, 10:48am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/9 "2016-02-18T10:48:11Z")

</div>

About ten years ago we would stuff a cookie into the browser of any suspended user when they tried to log in. If they attempted to use another account, or registered a new one, those account would be flagged as a ‘miserable user’ and be subjected to fake server errors and slow page loading times.

As soon as the ban on the primary account was lifted all of their accounts would suddenly start behaving again. 😃

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [Fevereiro 18, 2016, 10:53am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/10 "2016-02-18T10:53:14Z")

</div>

> [@fefrei](#):
>
> We could even ban an IP from creating accounts for a day or two once a suspended account tried to log in from it… :troll:

This I don’t like…think about places where users might share a public IP address, like large companies, schools, government, etc. I don’t want to have a situation where User A is suspended, attempts to log in, and then new User B who goes to school with User A cannot create an account. That could be disastrous for a community!

---

<div class="post-metadata">

### Author: ![fefrei](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/fefrei/32/119538_2.png) [@fefrei](https://meta.discourse.org/u/fefrei)
#### Post date: [Fevereiro 18, 2016, 10:54am UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/11 "2016-02-18T10:54:40Z")

</div>

This rule could have the same exceptions as `max new accounts per registration ip` (which boil down to “if there are multiple good users from a single address, it won’t be affected”).

---

<div class="post-metadata">

### Author: ![DeanMarkTaylor](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/deanmarktaylor/32/102462_2.png) [@DeanMarkTaylor](https://meta.discourse.org/u/DeanMarkTaylor)
#### Post date: [Fevereiro 18, 2016, 3:04pm UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/12 "2016-02-18T15:04:34Z")

</div>

There is one “community” that comes to mind when thinking of “bans”. The community has probably “banned” more users than any other, bans are effectively equivalent suspensions in Discourse.

I’m not saying these should be copied, just that the messaging here in these screenshots is perhaps more clear regarding actions when compared to Discourse currently.

Taken from [Reddit - Please wait for verification](https://www.reddit.com/r/BannedFrom4chan/) of the what looks like two types of messages:  
**Short Ban:**

 ![](https://global.discourse-cdn.com/meta/original/3X/6/a/6af66e90de7bb440e05249275a676db08dca10ea.png)

**Long Ban:**

 ![](https://global.discourse-cdn.com/meta/original/3X/c/c/ccf6e23eeb3f38a325275ecc555a67bc1281845b.png)

Note the longer ban includes a way of contacting for an appeal, but also includes additional information to identify why a ban might affect you.

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [Fevereiro 18, 2016, 5:48pm UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/13 "2016-02-18T17:48:18Z")

</div>

Just for fun, I dug out the full list of behaviours for miserable users:

1. Slow response (time delay) on every page (20 to 60 seconds default).
2. A chance they will get the “server busy” message (50% by default).
3. A chance that no search facilities will be available (75% by default).
4. A chance they will get redirected to another preset page (25% & homepage by default).
5. A chance they will simply get a blank page (25% by default).
6. Post flood limit increased by a defined factor (10 times by default).
7. If they get past all this okay, then they will be served up their proper page.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [Fevereiro 18, 2016, 6:42pm UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/14 "2016-02-18T18:42:08Z")

</div>

> [@steve\_pd](#):
>
> Just for fun, I dug out the full list of behaviours for miserable users:

I’ll be honest here: I don’t like this. Users should be suspended for a reason - typically, that reason is due to violation of the sites rules and guidelines, repeatedly, after warnings are given by staff. If a suspension is warranted, I want it to be clear as day to the user that they are suspended, and why. By making a site do strange things that appear to be server issues, there is nothing telling the user “Hey, you broke the rules and lost privileges here for a while. This is what you did wrong, don’t do it again!”. Instead, it almost encourages the user to start complaining about issues, potentially causing more issues instead of letting them “cool down”, understand why they were suspended, and try and correct the issue when they return to the site.

---

<div class="post-metadata">

### Author: ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)
#### Post date: [Fevereiro 18, 2016, 8:06pm UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/15 "2016-02-18T20:06:54Z")

</div>

This is my favorite type of message here, after trying to log in, display a canned message and present the IP address on the page.

… but …

Users that are banned really don’t care about any of this stuff, if they REALLLY need to log in they will find a way, also I feel a lot less compelled to invest time here for something that is not a huge problem.

Simplest thing I support doing now is hiding “Log In” and “Create New Account” if the error “Account suspended” comes up.

---

<div class="post-metadata">

### Author: ![Stephen](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/stephen/32/95011_2.png) [@Stephen](https://meta.discourse.org/u/Stephen)
#### Post date: [Fevereiro 18, 2016, 8:22pm UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/16 "2016-02-18T20:22:37Z")

</div>

You wouldn’t feel that way had you read my original post earlier in the thread. The point was that **this behaviour was applied to any suspended user who attempted to circumvent a ban by creating a new account**.

Hence:

> [@steve\_pd](#):
>
> If they attempted to use another account, or registered a new one, those account would be flagged as a ‘miserable user’ and be subjected to fake server errors and slow page loading times.

> [@sam](#):
>
> Users that are banned really don’t care about any of this stuff, if they REALLLY need to log in they will find a way, also I feel a lot less compelled to invest time here for something that is not a huge problem.

It had more impact back when smartphones and mobile data wasn’t the norm. Most everyone has a second device, and address, that they can use.

---

<div class="post-metadata">

### Author: ![jomaxro](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/jomaxro/32/126216_2.png) [@jomaxro](https://meta.discourse.org/u/jomaxro)
#### Post date: [Fevereiro 18, 2016, 8:25pm UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/17 "2016-02-18T20:25:05Z")

</div>

> [@steve\_pd](#):
>
> You wouldn’t feel that way had you read my original post earlier in the thread.

I did read your previous post, however I misinterpreted it. I thought that a banned user would get the cookie and be allowed to log in to their main account, _ **in addtion** _ to any encountering issues with any new accounts they attempted to create.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Fevereiro 18, 2016, 10:50pm UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/18 "2016-02-18T22:50:55Z")

</div>

> [@sam](#):
>
> Simplest thing I support doing now is hiding “Log In” and “Create New Account” if the error “Account suspended” comes up.

Great idea, if this is relatively easy @neil can you add it to your list?

---

<div class="post-metadata">

### Author: ![neil](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/neil/32/102150_2.png) [@neil](https://meta.discourse.org/u/neil)
#### Post date: [Fevereiro 19, 2016, 6:45pm UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/19 "2016-02-19T18:45:35Z")

</div>

Done! If the person logging in is suspended, the login modal is closed and a new modal is shown with the “Account suspended until…” message.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [Fevereiro 19, 2016, 11:42pm UTC](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780/20 "2016-02-19T23:42:53Z")

</div>

I agree this is a nice change, no reason to encourage suspended users by dangling the new account dialog in front of them. Great idea @Mittineague.

[Próxima página](https://meta.discourse.org/t/stop-making-it-so-easy-for-suspended-users-to-create-puppet-accounts/39780.md?page=2)
