We get a lot of spam after CSRFShield been removed.
A lot of fake users registered.
#33278 We get a lot of spam after CSRFShield been removed
Posted in ‘Admin Tools for Joomla! 4 & 5’
This is a public ticket
Everybody will be able to see its contents. Do not include usernames, passwords or any other sensitive information.
Environment Information
Joomla! version
n/a
PHP version
n/a
Admin Tools version
n/a
Latest post by on Wednesday, 22 July 2020 17:17 CDT
Saturday, 20 June 2020 01:15 CDT
inteligent
Monday, 22 June 2020 00:48 CDT
nicholas
Akeeba Staff
Manager
Fake users registering but not activating is not a problem. Admin Tools can automatically delete these users. Check the options of the System – Admin Tools plugin.
Moreover, Joomla has allowed using a CAPTCHA for user registration the past 6 or so years. First, make sure you have installed and activated a CAPTCHA plugin on your site. Joomla comes with plugins for Google ReCAPTCHA. Then go to Users, Manage, Options and set the Captcha option to your plugin. From now on nobody can register a new user without going through a CAPTCHA.
As I've written in the release notes, the CSRFShield made sense with Joomla 1.5 back in 2010. It is no longer relevant in 2020. It has been superseded by more elegant and more effective solutions. I feel guilty that y'all relied on my ten-year-old feature that was no longer up to par instead of using Joomla's CAPTCHA feature to secure your forms. I should have told you earlier not to do that. I'm sorry I let you down :(
Nicholas K. Dionysopoulos
Lead Developer and Director
🇬🇷Greek: native 🇬🇧English: excellent 🇫🇷French: basic • 🕐 My time zone is Europe / Athens
Please keep in mind my timezone and cultural differences when reading my replies. Thank you!
Wednesday, 22 July 2020 17:17 CDT
System Task
system
This ticket has been automatically closed. All tickets which have been inactive for a long time are automatically closed. If you believe that this ticket was closed in error, please contact us.