• twitter image
  • facebook image
  • youtube image
  • linkedin image
Language: CMS Made Simple Czech CMS Made Simple France CMS Made Simple Spain CMS Made Simple Hungary CMS Made Simple Russia CMS Made Simple Netherlands

All times are UTC




Post new topic Reply to topic  [ 7 posts ] 
Author Message
 Post subject: Self Registration Security Settings
PostPosted: Sun Jul 11, 2010 1:50 pm 
Offline
Forum Members
Forum Members

Joined: Tue Jun 06, 2006 1:10 pm
Posts: 109
Location: TX
I have searched and no luck.  I read documentation and can not find the answer to this.

CMS 1.7.1
PHP  5.2.6
FEU   1.9.3
SelfRegistration 1.4.2
CGExtensions 1.19
CGSimpleSmarty 1.4.5
CustomContent 1.5.3

From Selfreg 1.4.2
Quote:
Absolutely forbid users to register to these groups:
 Group 1

List of whitelist username/emails
*/email@xyz.com


It looks to as if the Security Settings in Selfreg works like this
No one can join the highlighted group unless he/she are in the white list.  That did not work.  I tried both */email@xyz.com and email@xyz.com.  So I assume users can only be a member of "Group 1" if the admin assigns them to it.  So Whitel ist should mean that users can join any other group only if they are in the white list. That did not work.  All cases returned the message you can not join this group.

What is the White List used for.  I assumed that only usernames and email addresses in the white list were allowed to become members of a group.

I've read the module help http://wiki.cmsmadesimple.org/index.php/User_Handbook/Admin_Panel/Users_and_Groups/Self_Registration
and http://wiki.cmsmadesimple.org/index.php/User_Handbook/Admin_Panel/Users_and_Groups/Front_End_Users

Is there some documentation I'm missing?

Mark

_________________
Mark


Last edited by dmgd on Thu Sep 02, 2010 1:58 pm, edited 1 time in total.

Top
 Profile  
 
 Post subject: Re: Self Registration Security Settings
PostPosted: Sun Jul 11, 2010 3:05 pm 
Offline
Administrator
Administrator
User avatar

Joined: Thu Mar 09, 2006 5:32 am
Posts: 10682
Location: Arizona
Maybe the PDF on this page will help?...

http://calguy1000.com/downloads.html

_________________
Extensions » Modules/Tags click the name of the module/tag or Help to the right to get it's parameters.
Right click and view source is a great way to see what you have to work with.
Check ver. CMSMS, PHP, server OS, in System Information page.
Default content http://multiintech.com/defaultcontent/
People are Wonderful
Business is Great
Life is Terrific
Ever wonder what happened to the Album module? Well it is alive and well.
http://album.multiintech.com/

Image


Top
 Profile  
 
 Post subject: Re: Self Registration Security Settings
PostPosted: Sun Jul 11, 2010 3:22 pm 
Offline
Dev Team Member
Dev Team Member
User avatar

Joined: Tue Oct 19, 2004 6:44 pm
Posts: 5954
Location: Fernie British Columbia, Canada
Later versions of SelfRegistration have some added security functionality that isn't documented  yet.

a) 'Absolutely Forbit Members to Register to these groups'
this was a sponsored modification to prevent against hackers modifying form values and submitting them.  it ensures that users can only register to the group(s) you allow, incase you have many different kinds of groups.  It is completely independant of the whitelist stuff.

b) 'List of whitelist username/emails. One per line. (use * for wildcards):'
This is either a whitelist or blacklist (depending upon which option you choose) to prevent people with certain email or username patterns from registering to your site.

i.e: if you did not want to allow any users with a .info address you would do this:
i) set the 'Enable Whitelist' pulldown to 'Don't allow matched username/email addresses to register'
ii) in the whitelist text area enter an expression of *.info

Hope this helps.

_________________
Follow me on twitter
For quality help follow these instructions:
a) Think about the problem for an hour
b) research the problem for an hour
c) spend 1/2 an hour explaining it and providing as much information as you can muster
(too much information is okay, not enough information may get your question ignored).
--
if you can't bother explaining your problem well, why should we bother helping with it.
----------------
Don't make me angry..... you won't like me when I'm angry....


Top
 Profile  
 
 Post subject: Re: Self Registration Security Settings
PostPosted: Sun Jul 11, 2010 9:46 pm 
Offline
Forum Members
Forum Members

Joined: Tue Jun 06, 2006 1:10 pm
Posts: 109
Location: TX
Thanks guys.
Robert,
I'm sorry, I missed that dropdown "Enable Whitelist:" 

My tired old eyes aren't what they use to be.  8) I don't wear the sun glasses because I cool.

_________________
Mark


Top
 Profile  
 
 Post subject: Re: Self Registration Security Settings
PostPosted: Thu Sep 02, 2010 2:06 pm 
Offline
Forum Members
Forum Members

Joined: Tue Jun 06, 2006 1:10 pm
Posts: 109
Location: TX
I still have a question about this.

Does the 'List of whitelist username/emails. One per line. (use * for wildcards):' check both username and email or does it only check the username?  I mean if I use email as username then I enter email addresses in the list.  If I have user defined usernames e.g. markg then I add user names to the white list.

What registration form fields does whitelist compare?

_________________
Mark


Top
 Profile  
 
 Post subject: Re: Self Registration Security Settings
PostPosted: Sat Dec 18, 2010 10:45 am 
Offline
Power Poster
Power Poster
User avatar

Joined: Sun Jun 22, 2008 5:33 am
Posts: 316
Location: Sweden
@eero

A little tip about posting hacks.
http://forum.cmsmadesimple.org/index.ph ... #msg238765

_________________
CMS Made Simple Geek Moot 2012
Call for donations: Help some developers get to the geekmoot!

Important How To Submit a Question So You'll Actually Get Help
Why don't use wiki or search?
Do you read Help?
Admin for Swedish Translations Team
Moderator Swedish Forum
After your problem is solved add [Solved] in the subject


Top
 Profile  
 
 Post subject: Re: Self Registration Security Settings
PostPosted: Sat Dec 18, 2010 12:01 pm 
Offline
New Member

Joined: Sun Sep 14, 2008 5:35 am
Posts: 1
Thank You Coldman for the tip. It is true. If You want, remove or edit my message. It's okey.

But the code change does not affect the safety of. Just change the order of the fields to be checked. And change the field in which the whitelist of monitors. (Hmm, was spelled correctly?)

Have a nice day  :)


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

All times are UTC


Who is online

Users browsing this forum: No registered users


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
Arvixe - A CMSMS Partner