Require_validation on OJS 2.4.8-2

[rensousa]

Hello All,

I configure my ojs site (version 2.4.8-2) to require validation of users via email to avoid creating SPAM accounts.
I set the directives below:
require_validation = On
validation_timeout = 3

However, accounts are still being created and are not being automatically deleted after validation_timeout.
How can I remove unconfirmed users?

Regards,

Renato

[ctgraham]

The require_validation flag in OJS 2.x will not automatically delete accounts after the validation_timeout. It will simply prevent login if the account is not validated before the validation_timeout. You can manually merge these accounts out of existence, or you can use the database to query for the usernames/userids and feed the users into the command line merge users tool. See “cleaning lots of users” here:

How do I combat SPAM?

There are a number of configuration steps you can take to combat SPAM and other forms of malicious registration activity on your site. CAPTCHA/ReCAPTCHA Configure a CAPTCHA and enable it for user registration, notifications and commenting. We strongly advise using Google’s ReCAPTCHA (https://www.google.com/recaptcha/intro/). (Older OJS 2 versions include a PHP captcha, but that has proven to be less secure than ReCaptcha.) If you are using OJS older than 2.4.8-3, you will not be able to use t…