![[OzzModz] Security Lock Old Accounts](/community/data/resource_icons/9/9372.jpg?1707865867){kind=icon}
[OzzModz] Security Lock Old Accounts 2.1.0
- Thread starter Ozzy47
- Start date
Dkf
Active member
It's concerning that this user doesn't have access to the "Contact Us" page. Instead, they're encountering an error from this plugin that fills the entire screen. It's odd because even blocked users and guests have access to this page, yet a user who registered many years ago, whose login credentials we've verified, does not. Is this fair?
These are harsh measures... The user may not have access to their email.
S4m'
Active member
For my part, it works fine, it's something I'd done manually with the batch update users but this add-on makes sure it's done automatically. 
When you have a large community, it often happens that accounts sleep, and the spammer finds accounts that were found in data leaks given and they come to try on your forum, in my case it happened at least 50 times in 1 year.
Thanks Ozzy
When you have a large community, it often happens that accounts sleep, and the spammer finds accounts that were found in data leaks given and they come to try on your forum, in my case it happened at least 50 times in 1 year.
Thanks Ozzy
Dkf
Active member
Ok
What if there's no access to email? Sometimes email services shut down. Or you lose access to them.
Prohibiting access to the contact page with administration is going too far...
Ozzy47
Well-known member
Ozzy47 updated [OzzModz] Security Lock Old Accounts with a new update entry:
[OzzModz] Security Lock Old Accounts for XenForo 2.2+ Update 2.1.0
Read the rest of this update entry...
[OzzModz] Security Lock Old Accounts for XenForo 2.2+ Update 2.1.0
Read the rest of this update entry...
htsumer
Active member
I register forum members with e-mail confirmation. Those whose e-mail address is incorrect cannot benefit from the forum because they cannot verify it. For users in this situation, when they come to the forum after more than 365 days, they will not be able to reset their e-mails because they are fake. How can we find a solution to this?
Ozzy47
Well-known member
I would ensure users have the proper email when registered.
But, they can always use the contact us form to contact you to do what is needed.
MentaL
Well-known member
Scenario:
I use Amazon SES, If an old account becomes security locked and has too many bounces then the email automatically gets put on a blacklist. Given they are using an old account that is locked, limited or the email simply does not exist, does that mean the user is locked out of their account indefinite without the ability to update the password on the website?
Just thinking of some issues.
Regards.
MaximilianKohler
Well-known member
SES only blocks emails for spam complaints or hard bounces. They wouldn't do anything about "too many bounces".
Either way, the user is able to email the forum admin through the contact page and you can manually change their account status. If their email gets blocked by SES you can log in to the SES console and remove it, but that's probably never something you want/have to do.
If their old email is invalid and their password doesn't work due to requiring a reset it might be hard for them to prove they're the account owner though?
Either way, the user is able to email the forum admin through the contact page and you can manually change their account status. If their email gets blocked by SES you can log in to the SES console and remove it, but that's probably never something you want/have to do.
If their old email is invalid and their password doesn't work due to requiring a reset it might be hard for them to prove they're the account owner though?
MentaL
Well-known member
Historically, I would have a special hidden field for users to insert a phrase or a word in the event of this situation. They would email , I would ask for the secret word on the account and it helps mitigate.
GW2
Well-known member
@Ozzy47 Just another big thank-you for this add-on. I downloaded it a few days ago and it seems to be working fine.
I have many user accounts that seem to get hacked occasionally (resulting in spam). These seem to be user accounts that have not accessed my forum in well over a year and probably have weak passwords in the first place, and/ or the user has changed emails but did not change the email address in their XF profile settings. I think this add-on will help minimize that type of problem.
I have many user accounts that seem to get hacked occasionally (resulting in spam). These seem to be user accounts that have not accessed my forum in well over a year and probably have weak passwords in the first place, and/ or the user has changed emails but did not change the email address in their XF profile settings. I think this add-on will help minimize that type of problem.