Skip to:

stop anonymous users from using registered usernames/email

  • zoddshop63


    I want to enable anonymous users to post. But I noticed they can still post using registered usernames/emails. This allows for people to impersonate one another.

Viewing 1 replies (of 1 total)

  • Robin W


    that’s an interesting point.

    On email addresses, users do not know each others email addresses from the website, and emails addresses are not shown (unless you are using them as usernames). It is possible that registered user George with email wants to post an anonymous comment alongside his real one. He can post with a username of say Fred, but must enter an email address in the form, so does he use his real one ( or must he enter a made up one? And if you don’t permit a real one from a registered user being used, then as an anonymous poster if I try an email address and it rejects, I know that the user with that email address is already on the site. That user might not want it know that he uses the site, but by testing and telling people that email address exists you are publicizing who is using the site. It’s almost certainly doable, but might have undesired consequences.

    On usernames, it is equally possible for one anonymous user to pose as another anonymous user, so it is not just registered users who can get spoofed. Now you could add a test for registered users, and reject these, and that might be sensible, but it is beyond free help, as it would be a chunk of work to do.

    If interested in email or username checking, contact me via with a link bacjk to this thread.

Viewing 1 replies (of 1 total)
  • You must be logged in to reply to this topic.
Skip to toolbar