Awaiting feedback User registration

[Spartan]

i have user registration off, but someone, or a bot, was able to register a username.

 

[Jeremy]

Do you have any add-ons installed? Any that deal with registration or user accounts.

 

[Spartan]

Do you have any add-ons installed? Any that deal with registration or user accounts.

No.

 

[Spartan]

Exact same thing just happened on my other site. Same username too.

 

[Chris D]

The site in your screenshot there has registration enabled:

http://the-boneyard.com/register

 

[Spartan]

The site in your screenshot there has registration enabled:

http://the-boneyard.com/register

Yes, but not on my other site. On the-boneyard I have registration enabled, but each registration must be manually approved. This username got through, but was not manually approved.

 

[markku]

ttTester...

You don't have Tapatalk?

 

[Spartan]

ttTester...

You don't have Tapatalk?

I did have Tapatalk at one time.

 

[Spartan]

If it helps, this is the email address used.

testerninepin+715303@gmail.com

 

[Mike]

Are the Tapatalk files still in place perhaps?

 

[TickTackk]

Open library library\XenForo\ControllerPublic\Register.php
Find:

protected function _assertRegistrationActive()
{
// bunch of code here
}

Replace the last curly brace with

XenForo_Error::logError(@serialize(get_declared_classes()));
    }

Create new account via this url yourdomain.com/register. logout and login to ACP, there should be a error message logged. Send it to me via PM or post it here

 

[Optic]

Yes, but not on my other site. On the-boneyard I have registration enabled, but each registration must be manually approved. This username got through, but was not manually approved.

Tapatalk is still active here:
http://the-boneyard.com/mobiquo/mobiquo.php

As long as that PHP file is there, the Tapatalk app can use it to bypass Xenforo's registration as its API has direct access to your database.

 

[markku]

If it helps, this is the email address used.

testerninepin+715303@gmail.com

Interesting.

I just had a Tapatalk user register with this email:

testerninepin+135799@gmail.com

What is this? Why is a testerninepin@gmail.com signing up to forums using Tapatalk like this?

This person is signing up to many forums, e.g.,
http://yoyoexpert.com/forums/index.php?action=profile;u=33379

http://www.stopforumspam.com/ipcheck/50.17.254.140

 

[Liam W]

Open library library\XenForo\ControllerPublic\Register.php
Find:

protected function _assertRegistrationActive()
{
// bunch of code here
}

Replace the last curly brace with

XenForo_Error::logError(@serialize(get_declared_classes()));
    }

Create new account via this url yourdomain.com/register. logout and login to ACP, there should be a error message logged. Send it to me via PM or post it here

There will only be an error logged if debug mode is enabled, which is unlikely.