XF 2.1 XF & Multiple Registrations

[Alfuzzy]

How does XF guard against multiple registrations by the same user/member?

Is it IP address...email address...username...a combination of these...or something else totally different?

Thanks

 

[frm]

Ban ip, they can get around with VPN.

Ban email address, they can use a new one.

Put the username in the banned list, they can pick a new one.

There's really no way to discourage a problematic user except for being on top of it to ban again.

 

[Paul B]

Email addresses and user names must be unique.

 

[Southfork1]

It's not really guarded against, save for that your limited to a single ID per email. There are however decent add-on's that help. That add-on helps as one of the tools but it's not an easy button.

 

[Alfuzzy]

Email addresses and user names must be unique.

Thanks Brogan. Does this mean that both must be unique (username & password)...and if one or both match something already in the database...the new registration is rejected?

 

[Alfuzzy]

Ban ip, they can get around with VPN.

Ban email address, they can use a new one.

Put the username in the banned list, they can pick a new one.

There's really no way to discourage a problematic user except for being on top of it to ban again.

Thanks for the info. I'm aware of all these possibilities...been dealing with all of those situations with vBulletin for 12 years before migrating to XF. Was just checking to see if XF had any special way of dealing with this.

 

[Alfuzzy]

There are however decent add-on's that help.

That add-on helps as one of the tools but it's not an easy button.

What's the add-on...do you have a link to it?

Thanks

 

[Southfork1]

What's the add-on...do you have a link to it?

Signup abuse detection and blocking, in the resource section.

Signup abuse detection and blocking

From (simple) multiple accounts detection to isp/connection fingerprinting with score-based moderating/rejecting logic. These are very effective low-hanging fruit at reducing spam. Supports migration configuration from the following XF1 add-ons...

xenforo.com

 

[Paul B]

if one or both match something already in the database...the new registration is rejected?

Correct.

 

[Southfork1]

I'd prefer to verify identities at registration. Emails, ID's, generic Q&A and IP's are for separating anonymous people from bots. Validate against FB, Google, a 3rd party add-on that costs my users a $mall amount, whatever, but something that makes the option of anonymity an option for the admin.

 

[Alfuzzy]

Signup abuse detection and blocking, in the resource section.

Signup abuse detection and blocking

From (simple) multiple accounts detection to isp/connection fingerprinting with score-based moderating/rejecting logic. These are very effective low-hanging fruit at reducing spam. Supports migration configuration from the following XF1 add-ons...

xenforo.com

Awesome...thanks for clarifying. I did see earlier about getting an API key for Stop Forum Spam.

 

[Alfuzzy]

View attachment 233726

I'm not seeing this exact option in my XF 2.1:

Setup > Options > Signup abuse detection and blocking (aka spam).

All I see is:

Setup > Options > Spam Management

Thanks

 

[Paul B]

It's from the add-on.

 

[Alfuzzy]

Ooh ok...got it. Didn't realize the link above was an add-on link. Lol

 

[Harpers Tate]

+1 for that suggested Add-On.
It's not 100% watertight - nothing ever could be for a clever user. But it gets a good proportion of the less-well "educated" attempts.