I configure my ojs site (version 2.4.8-2) to require validation of users via email to avoid creating SPAM accounts.
I set the directives below: require_validation = On validation_timeout = 3
However, accounts are still being created and are not being automatically deleted after validation_timeout.
How can I remove unconfirmed users?
The require_validation flag in OJS 2.x will not automatically delete accounts after the validation_timeout. It will simply prevent login if the account is not validated before the validation_timeout. You can manually merge these accounts out of existence, or you can use the database to query for the usernames/userids and feed the users into the command line merge users tool. See “cleaning lots of users” here: