Require_validation on OJS 2.4.8-2

[ctgraham]

The require_validation flag in OJS 2.x will not automatically delete accounts after the validation_timeout. It will simply prevent login if the account is not validated before the validation_timeout. You can manually merge these accounts out of existence, or you can use the database to query for the usernames/userids and feed the users into the command line merge users tool. See “cleaning lots of users” here:

How do I combat SPAM?

There are a number of configuration steps you can take to combat SPAM and other forms of malicious registration activity on your site. CAPTCHA/ReCAPTCHA Configure a CAPTCHA and enable it for user registration, notifications and commenting. We strongly advise using Google’s ReCAPTCHA (https://www.google.com/recaptcha/intro/). (Older OJS 2 versions include a PHP captcha, but that has proven to be less secure than ReCaptcha.) If you are using OJS older than 2.4.8-3, you will not be able to use t…