User awaiting email confirmation - handling multiple registration

[centomegabit]

Hi everyone,

I am trying to solve an issue related to managing users who do not complete the email confirmation process during registration. This situation creates several complications for the site: many users register, do not confirm their email address, and continue browsing normally, taking advantage of the temporary access granted to them. However, when their session expires and they need to log in again, they often don’t remember their password, and since they used invalid or rarely checked email addresses, they are unable to complete the password recovery process. As a result, they create a second account, adding to the previous ones and complicating the management of registered users, requiring manual checks that become increasingly complex as the number of users grows.

Here is the sequence of events that creates this problem:

1. A user registers on the site but does not confirm their email.
2. As long as the session remains active, the user can browse as a REGISTERED USER without any limitations.
3. With unrestricted access, the user sees no reason to confirm their email to continue accessing the site.
4. When the session expires, the user is required to log in again.
5. At this point, the user often does not remember their password and, during registration, they may have used an email address that is invalid or not frequently checked.
6. Unable to recover the password, the user decides to create a new account.
7. I use an add-on to identify such behaviors, but the high number of duplicates makes it difficult to manually review all registrations.
8. Given the increase in registered users, managing this situation has become an urgent issue.

The possible solution that comes to mind is to restrict site access for users who haven’t confirmed their email, but I’m unsure about the best way to implement this or whether it’s the right solution.

Another method I think is to use a promotion system.

Has anyone dealt with a similar issue or have any suggestions on how to address this effectively?

 

[Paul B]

The unregistered/unconfirmed user group permissions apply to those who register but don't verify their email address.

If you restrict permissions for that group it will also apply to unregistered guests.

You could use a user group promotion based on the user state to add them to a group with disabled permissions instead but that would result in unregistered guests having greater access and permissions than registered unconfirmed members, assuming guests can view content.

 

[ENF]

We have a fairly strict policy.

1) We use this addon to block people from using the site until email is confirmed. (Can't view anything on the site until this is done)
2) Anyone that doesn't confirm their email within 1 hour, the account is deleted.
3) We also use this addon to control duplicate accounts and control how people join the site.

Works for us, but it depends on how strict you can be with your members.