New Registrant Bypasses TOS and blocked email domain

Posted: Wed Nov 04, 2009 12:16 pm

Just had a user that went through the registration process with a @yahoo.com address and "yahoo.com" is listed in my "limits" configuration. Also, this user did NOT have to agree to the 13yo age limit OR the TOS, bypassed both somehow.

I tried this myself with my own @yahoo.com address and it would not let me past the registration screen.

What's up with this?

Cheers

Posted: Wed Nov 04, 2009 6:36 pm

I'll take a look.

Posted: Wed Nov 04, 2009 7:00 pm

Are you sure an admin did not create the user?

Posted: Wed Nov 04, 2009 8:36 pm

There is only admin, me .. and I assure you I didin't create him. The IP was from the U.S. - Iowa. No clue ..

Note: Forgot to mention that the new registration email was trapped by SpamAssassin and wound up in my spam mailbox. The SA test was spoofed_yahoo_address or something similar. Looks like that was the reason why the limit "yahoo.com" could have been fooled. This has the possiblity of opening the proverbial "can of worms".