Questions & Answers » mandatory fields

Xobor.com - Free Support Forum � Forum Support � Questions & Answers � mandatory fields

Topic settings

Jump to forum

Information News & Announcements Forum Support Questions & Answers Bug Report Help us with translation Feature requests Templates & Languages Miscellaneous Introduce your Forum Off Topic Praise & Criticism

#1 | mandatory fields datum

Mon Mar 14, 2011 9:41 am

Hi Ingmar,
a new user registered at my board at 3.30 am (strange time to be registering) and has registered without filling in mandatory fields set for sighn up, just gives the IP adress.
i have just tried to register a new account myself without filling them in and it wont let me.

I have yet to authorise this new memebr, however wonderd if you knew how it was possible for them to register without filling in mandatory fields, or is it likely to be spam?

Many Thanks,

Jayne

reply

#2 | RE: mandatory fields datum

Mon Mar 14, 2011 11:49 am

Hi Jane,

the additional mandatory signup fields are actually oonly checked via Javascript. That means if a member disables Javascript he or she is able to submit the form without filling out the custom required fields.

The reason for this is simple: While we can check wether a user entered a valid email address, we have no way of checking wether a user generated field has been filled out correctly - all we could do is check wether the field is "not empty". Since it is much easier too just type "asd" instead of diabling Javascript just to "cheat " in the signup we have not implemented a server side check.

Back to your question:
If someone deliberately disables Javascript so they can cheat on the signup form, I personally would just decline the registration request and see what happens - if it's a valid user he or she will try again.

Regards,
Ingmar

Technical Supervisor · Xobor.com

reply

#3 | RE: mandatory fields datum

Mon Mar 14, 2011 12:02 pm

Hi INgmar,
Thanks for the reply and explanation. I myself have only a dot in the required field (im Admin, i'm alowed to cheat ).

I did look up the email adress on google, and it came up as a known forum spam email, so it obvioulsy does disable Java. Also on looking up the email and IP adress together i got the same results, althgough that emial adress has been seen to come form several other IP adresses too.

I have declined the request and like you say if they are genuine, they will contact me to ask why they cant log in.

Thanks again for your help

reply

new member not showing up � � Sidney Powell responds after Trump campaign says she is not part of legal team:

Xobor.com - official support forum

Please enter a reason for warning.