[Dnfbb-developers] User Signup

[<dnf...@li...>]

I will hopefully finish the create user interface tonight, to help reduce
false signups the process is currently:

1.  User signs up
2.  DB Generates a random string used to verify signup. This has
necessitated a new column in DNFBB_USERS.
3.  DB Generates a welcome email including randomly generated password and a
link to a page to validate signup.
4.  DB Generates an email to admin, if required, to notify of new signup.
This is done by User Group, all users in the group will receive a message,
if the option is set.
5.  User verifies the signup and logs in.

One of my thoughts here was that if some malicious user automates signups
then the admin can get a list of those users whose accounts have not been
verified and easily delete them from the admin interface.  N.b. I had to do
this manually once it was a nightmare.

There is a feature request to help combat false signups
(http://sourceforge.net/tracker/index.php?func=detail&aid=1369203&group_id=1
52364&atid=784892), I can't see it being in place for version 1, as I would
like to release a functional version as soon as its ready :-) 

Another thought was that the validation link could also be used in the
following circumstances:

#  User changes email address
#  User changes password

Hopefully these steps will make it harder for hackers and easier for admins.
I have also just added a new feature request
(http://sourceforge.net/tracker/index.php?func=detail&aid=1412892&group_id=1
52364&atid=784892) to help prevent automated signups.

Finally, my question.  Does the above make sense, am I missing something
obvious?

Rgds

Si