!
Hubzilla Support Forum The account policies to register enable email invitations to new user candidates by the admin and by users. The configurations are
Admin > Site > New member registration:
In case new member registration is
Yes |
YesWithApproval, the configuration
Admin > Site > Invitation ->
Off |
On is paid attention and in case of
On the support of email invitations is served.
To perform an email invitation, the app "Invite" needs to be activated. The app sends a form, where one or more email recipients may be adressed. In one previous post I told about the modified app to allow different template based invitation messages also with individual languages for the recipients.
The logic up to now generates random invite codes, that allows a new user to register an account for self. The current logic allows everybody knowing one of the generated invite codes to register, without any dependencies else. Each recipient of the email invitation may forward the email to any recipient in the world, to allow registration instead. Such logic is not without some charme to promote a site. But in my opinion not sufficient enough.
My suggestion is, to add some more control into the logic:
*
Opt 0Works as currently is, including check of the domain part of the email address against the WL/BL of
Admin > Security > Allowed/Disallowed email domains.
*
Opt 1Invite codes expire. Needs a new config (ie
config 'system', 'invite_expire' = 7d or such).
*
Opt 2a) The candidates (recipients) email address is bound with the email address the invitation is sent to and becomes verified during registration.
b) The email address is also checked against the current registered email addresses (ie has to be new).
c) Email recipient addresses have to be unique (purging duplicates). That may perhaps be integrated into opt 0 instead.
*
Opt 3Invitations sent are recorded in the system logs.
One config more can replace the current hard coded limit of 50 invitations, that already applies to users, not for the admins. For example
config 'system', 'invite_users_limit' = 50.
Any opinions and suggestions are welcome.
