Awaiting Feedback User registration

i have user registration off, but someone, or a bot, was able to register a username.

 

Do you have any add-ons installed? Any that deal with registration or user accounts.

 

No.

 

Exact same thing just happened on my other site. Same username too.

 

Yes, but not on my other site. On the-boneyard I have registration enabled, but each registration must be manually approved. This username got through, but was not manually approved.

 

ttTester...

You don't have Tapatalk?

 

I did have Tapatalk at one time.

 

If it helps, this is the email address used.

testerninepin+715303@gmail.com

 

Open library library\XenForo\ControllerPublic\Register.php
Find:

PHP:

protected function _assertRegistrationActive()
{
// bunch of code here
}

Replace the last curly brace with

PHP:

XenForo_Error::logError(@serialize(get_declared_classes()));
    }

Create new account via this url yourdomain.com/register. logout and login to ACP, there should be a error message logged. Send it to me via PM or post it here

 

Tapatalk is still active here:
http://the-boneyard.com/mobiquo/mobiquo.php

As long as that PHP file is there, the Tapatalk app can use it to bypass Xenforo's registration as its API has direct access to your database.

 

Interesting.

I just had a Tapatalk user register with this email:

testerninepin+135799@gmail.com

What is this? Why is a testerninepin@gmail.com signing up to forums using Tapatalk like this?

This person is signing up to many forums, e.g.,
http://yoyoexpert.com/forums/index.php?action=profile;u=33379

http://www.stopforumspam.com/ipcheck/50.17.254.140

 

There will only be an error logged if debug mode is enabled, which is unlikely.