Not a bug Urgent! Issue with Creating Multiple Accounts Using the Same Email

korelim said:
In other words, example+324@gmail.com is not actually a different email address.
Click to expand...
It is a different email address, as far as XF is concerned.

Google allows you to create "aliases" this way to separate mail.

You can register as your googleusername+xenforo@gmail.com on XF and if you get emails from anyone other than XenForo, it might tip you off that XF's emails were compromised as it'd deliver the mail to googleusername@gmail.com inbox.

This is a way for Google users to track who is selling data (or had a data leak).

I believe Apple has a similar feature as well to create "alias" inboxes so that you can register for Product A using your base name + an alias and if you ever get email from Product B, you know that Product A shared your email.

You would probably need custom development for it to reject Google/Apple aliases, but that might make some users angry as they value their privacy.
 
Yes, they are effectively distinct email addresses that happen to point to the same mailbox. Some users legitimately use this for email filtering etc.

It's not a bug. But perhaps there's an add-on that can prevent them if this poses an issue to you.

Worth noting that Gmail also supports adding dots in email addresses, e.g.

e.x.a.m.p.l.e@gmail.com will also be delivered to example@gmail.com
ex.am.pl.e@gmail.com will also be delivered to example@gmail.com

etc.

Ultimately it's not something I would expend a lot of energy worrying about. Even if you blocked all of these avenues (and the various similar ones which other email providers may support) it's not exactly trivial to just make a brand new Gmail account to be a nuisance or use a disposable email service.

It's just a game of cat and mouse that ultimately will waste your time.
 
Chris D said:
Yes, they are effectively distinct email addresses that happen to point to the same mailbox. Some users legitimately use this for email filtering etc.

It's not a bug. But perhaps there's an add-on that can prevent them if this poses an issue to you.

Worth noting that Gmail also supports adding dots in email addresses, e.g.

e.x.a.m.p.l.e@gmail.com will also be delivered to example@gmail.com
ex.am.pl.e@gmail.com will also be delivered to example@gmail.com

etc.

Ultimately it's not something I would expend a lot of energy worrying about. Even if you blocked all of these avenues (and the various similar ones which other email providers may support) it's not exactly trivial to just make a brand new Gmail account to be a nuisance or use a disposable email service.

It's just a game of cat and mouse that ultimately will waste your time.
Click to expand...
I was first but no like.

Sad emoji.
 
Chris D said:
Yes, they are effectively distinct email addresses that happen to point to the same mailbox. Some users legitimately use this for email filtering etc.

It's not a bug. But perhaps there's an add-on that can prevent them if this poses an issue to you.

Worth noting that Gmail also supports adding dots in email addresses, e.g.

e.x.a.m.p.l.e@gmail.com will also be delivered to example@gmail.com
ex.am.pl.e@gmail.com will also be delivered to example@gmail.com

etc.

Ultimately it's not something I would expend a lot of energy worrying about. Even if you blocked all of these avenues (and the various similar ones which other email providers may support) it's not exactly trivial to just make a brand new Gmail account to be a nuisance or use a disposable email service.

It's just a game of cat and mouse that ultimately will waste your time.
Click to expand...
Look please, I guess you didn't understand what I meant

My first email address.
Example:
korelim@gmail.com

But I can register to an unlimited number of xenforo sites like korelim+1@gmail.com
korelim+2@gmail.com. In other words, I can create a membership as I want by adding + at the end of 1 email address in exenforo
 
korelim said:
Friends, the problem here is this.
People can create as many accounts as they want with 1 email address. OMGG
Click to expand...
It's really a non issue. As already mentioned there are multiple ways of doing it. While theoretically possible to block email addresses containing a +, there are still many well-documented ways that the same effect can be achieved as noted.

Even if you could prevent all of those methods, someone could just create a new email address to get around it.

Oh and with Google as well for most people example@googlemail.com also points to example@gmail.com.

korelim said:
Look please, I guess you didn't understand what I meant

My first email address.
Example:
korelim@gmail.com

But I can register to an unlimited number of xenforo sites like korelim+1@gmail.com
korelim+2@gmail.com. In other words, I can create a membership as I want by adding + at the end of 1 email address in exenforo
Click to expand...
We perfectly understand what you're saying. It's just not an issue. I could create 100 accounts on your forum with relative ease with distinct email addresses not exploiting any of the "alias" address approaches.

Just don't worry about it.
 
korelim said:
Look please, I guess you didn't understand what I meant

My first email address.
Example:
korelim@gmail.com

But I can register to an unlimited number of xenforo sites like korelim+1@gmail.com
korelim+2@gmail.com. In other words, I can create a membership as I want by adding + at the end of 1 email address in exenforo
Click to expand...
Yes, but you will see in the korelim@gmail.com inbox that the mail was "sent" to korelim+1@gmail.com. This lets you identify where the mail came from.

It's a way of organizing and monitoring who is selling or leaking your personal data.

You can sign up for Netflix with korelim+netflix@gmail.com and if you ever got an email to that, in your original inbox, not from Netflix, you know that your netflix alias was leaked somehow.
 
korelim said:
As a solution, we need to ban the + sign in the registered e-mail. How can I do this?
Click to expand...

You can't, and it wouldn't make a difference even if you could.

Are you going to ban the . character in email addresses too? Are you going to ban @googlemail.com?

Are you somehow going to prevent users from just signing up new email addresses? No. It's pointless and fruitless.
 
Chris D said:
It's really a non issue. As already mentioned there are multiple ways of doing it. While theoretically possible to block email addresses containing a +, there are still many well-documented ways that the same effect can be achieved as noted.

Even if you could prevent all of those methods, someone could just create a new email address to get around it.

Oh and with Google as well for most people example@googlemail.com also points to example@gmail.com.


We perfectly understand what you're saying. It's just not an issue. I could create 100 accounts on your forum with relative ease with distinct email addresses not exploiting any of the "alias" address approaches.

Just don't worry about it.
Click to expand...
Now I understand better what you mean. Thanks for the information.
 

Similar threads

MentaL
  • Question Question
XF 2.3 Enable activity summary email bombards users with the same email.
Replies
2
Views
71
MentaL
MentaL
Xiomera
Fixed Don't merge users with the same email addresses at import (import from vB v3.8)
Replies
6
Views
1K
XF Bug Bot
XF Bug Bot
Back
Top Bottom