-
Type:
Bug
-
Status: Closed (View Workflow)
-
Priority:
Blocker
-
Resolution: Fixed
-
Affects Version/s: 3.0.8
-
Fix Version/s: 3.0.9-RC1
-
Component/s: None
-
Labels:None
-
Environment:MySQL 5.1.52
PHP 5.2.15
A mandatory custom profile field has been defined (custom_profile_field1.png), with a default value that is equal to the non entered value (custom_profile_field2.png). Users should therefore not be able to register without selecting a non-default value for this. This is indeed the case when registering through the phpBB registration screen. However, users (spammers) are able to register with the default value set - i.e. spammers are somehow submitting their own form to register, and it is bypassing the custom profile field validation.
- is related to
-
PHPBB3-9970 user_lang input not checked during registration
-
- Closed
-