!Hubzilla Support Forum
The account policies to register enable email invitations to new user candidates by the admin and by users. The configurations are Admin > Site > New member registration
In case new member registration is Yes
, the configuration Admin > Site > Invitation
is paid attention and in case of On
the support of email invitations is served.
To perform an email invitation, the app "Invite" needs to be activated. The app sends a form, where one or more email recipients may be adressed. In one previous post I told about the modified app to allow different template based invitation messages also with individual languages for the recipients.
The logic up to now generates random invite codes, that allows a new user to register an account for self. The current logic allows everybody knowing one of the generated invite codes to register, without any dependencies else. Each recipient of the email invitation may forward the email to any recipient in the world, to allow registration instead. Such logic is not without some charme to promote a site. But in my opinion not sufficient enough.
My suggestion is, to add some more control into the logic:
* Opt 0
Works as currently is, including check of the domain part of the email address against the WL/BL of
Admin > Security > Allowed/Disallowed email domains.
* Opt 1
Invite codes expire. Needs a new config (ie config 'system', 'invite_expire' = 7d
* Opt 2
a) The candidates (recipients) email address is bound with the email address the invitation is sent to and becomes verified during registration.
b) The email address is also checked against the current registered email addresses (ie has to be new).
c) Email recipient addresses have to be unique (purging duplicates). That may perhaps be integrated into opt 0 instead.
* Opt 3
Invitations sent are recorded in the system logs.
One config more can replace the current hard coded limit of 50 invitations, that already applies to users, not for the admins. For example config 'system', 'invite_users_limit' = 50
Any opinions and suggestions are welcome.