1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Awaiting Feedback User registration

Discussion in 'Resolved Bug Reports' started by Temery, Feb 9, 2015.

  1. Temery

    Temery Active Member

    i have user registration off, but someone, or a bot, was able to register a username.
     

    Attached Files:

  2. Jeremy

    Jeremy XenForo Moderator Staff Member

    Do you have any add-ons installed? Any that deal with registration or user accounts.
     
  3. Temery

    Temery Active Member

    No.
     
  4. Temery

    Temery Active Member

    Exact same thing just happened on my other site. Same username too.
     

    Attached Files:

  5. Chris D

    Chris D XenForo Developer Staff Member

  6. Temery

    Temery Active Member

    Yes, but not on my other site. On the-boneyard I have registration enabled, but each registration must be manually approved. This username got through, but was not manually approved.
     
  7. markku

    markku Well-Known Member

    ttTester...

    You don't have Tapatalk?
     
  8. Temery

    Temery Active Member

    I did have Tapatalk at one time.
     
  9. Temery

    Temery Active Member

  10. Mike

    Mike XenForo Developer Staff Member

    Are the Tapatalk files still in place perhaps?
     
  11. batpool52!

    batpool52! Well-Known Member

    Open library library\XenForo\ControllerPublic\Register.php
    Find:
    PHP:
    protected function _assertRegistrationActive()
    {
    // bunch of code here
    }
    Replace the last curly brace with
    PHP:
    XenForo_Error::logError(@serialize(get_declared_classes()));
        }
    Create new account via this url yourdomain.com/register. logout and login to ACP, there should be a error message logged. Send it to me via PM or post it here :)
     
  12. Optic

    Optic Well-Known Member

    Tapatalk is still active here:
    http://the-boneyard.com/mobiquo/mobiquo.php

    As long as that PHP file is there, the Tapatalk app can use it to bypass Xenforo's registration as its API has direct access to your database.
     
    Last edited: Feb 12, 2015
  13. markku

    markku Well-Known Member

  14. Liam W

    Liam W Well-Known Member

    There will only be an error logged if debug mode is enabled, which is unlikely.
     

Share This Page