A WangGuard hole for clever spammer. Need to solve immediately

  • Hello,

    There are some clever spammer those who first register with a non-blocked domain like gmail and yahoo. Then after log-in they immediately change the email to a disposal email address. And make spam post with it. And as they update the non-blocking email with the disposal email address the main email does not exit in the system db and they can register again and again with the email and replace it with a disposal email.

    So the domain block list need to check against the user profile email field. So the admin can update any email but author level user’s profile email field will be checked against the block domain list.

    I am requesting to the plugin author to take the matter VERY and VERY SERIOUSLY. As for a very large and popular site it is a vital issue.

    Please fix the problem.

    https://www.ads-software.com/plugins/wangguard/

Viewing 1 replies (of 1 total)
  • Plugin Author Jose Conti

    (@jconti)

    Hi Xianx,

    This is new :O

    Thank you for report it. We will try to check the emails when the user want to change it.

    Kind regards
    José Conti

Viewing 1 replies (of 1 total)
  • The topic ‘A WangGuard hole for clever spammer. Need to solve immediately’ is closed to new replies.