user can reset themselves to active again

If I use admin_user.php to set a user to not active the user can click again on the activation email if they still have it and they will be set to active again.

This only works if they haven't changed their password since they received the activation email (I think)

Is there any way round this other than disabling auto activation.

Thanks

Mike

Hi Mike,

Yes you're right and I will think about a solution (maybe that the activation mail is only valid for xx hours)

Hi Olaf,

Thanks for the quick reply. A time based solution sounds good for most situations.

There might be some situations where you would still have problems. for example you may have a user who registers and starts causing problems on your system. You would then be stuck with them for 6 hours or whatever your time out is. But such a troublemaker could cause problems by registering again with a new username anyway so its hard to stop them whatever you do.

So overall I would say a time out would be the best solution.

Mike

sure that could be a problem (that could bad 48 hours until the account is closed forever)

I used different states in other applications:

active
not active
and blocked

I guess it is easy to disallow the activation from a blocked account.

Thanks great suggestion! I will try to fix that soon...

check the new version on my website