Dear Felipe,
I have carried out several tests on the anomalous behavior of the plugin on different moodle platforms for which I offer the system administrator service, one of which for an institutional body, obtaining the same results.
"When the user tries to log in with his credentials, he can access the site without having to wait for the authorization of the platform administrator." This situation is not acceptable in some contexts.

Hearty Greetings
Giovanni

Hi Felipe and thanks for your great plugin. Unfortunately it also happens to me that, after the registration made by the users, I find myself with the same ones already confirmed even if I have not physically authorized any of them.

Thank's in advance
Domenico

I'll investigate. In the mean time, please confirm that you guys disabled the default Email registration.

Thank you,
Felipe

Hi guys, I tried it out and even though Moodle offers to resend the confirmation email, my test user never gets it nor can sign in until confirmed by the admin.

Felipe

This is true. Also from the moment that you don't want the user to be able to see this message you can alter this text to something like "Please wait for your institution to confrim your account" and with css hide the button to resend confirmation and problem solved.

I'm sorry to inform you that we have this problem on our Moodle 3.9 instance.
Here is how to reproduce the bug (the default email registration is disabled) :
1. User creates account
2. After submitting the form, Moodle says "ok, an admin will confirm your account, just wait"
3. Before the admin validates the account, if the user tries to log in, Moodle says "your account is not activated now, I can send you an email with the confirmation link"
4. If the user click on the button the mail is sent and the user is able to bypass the admin confirmation

Any idea to fix this? We have a lot of users bypassing the admin validation...
Thank you

Hello Oliver, what i did facing the exact same problem is that i hide the button with CSS and i altered the text of this message to something like
"You account is pending activation, as soon as it has been activated you will receive an email from our Administrator".

You can find this message at: moodledata/lang/en_local/moodle.php . If the file or folder don't exist you can create it by yourself.

and the code:

defined('MOODLE_INTERNAL') || die();

$string['emailconfirmsent'] = '

Pending Activation

Your account is waiting activation from our admin

After activation you will receive an email at the email address you have used during your registration.

Company Team

';
$string['emailresetconfirmsent'] = 'In order to be able to sign in your account must have been approved from our admin. When your account has been activated you will receive an email at the email address you have used during your registration.';
$string['mustconfirm'] = ' ';


Always remember to clear cache after editing files.

Thank you Angelo for your help.
I was able to hide the button with CSS and edit strings text using the Moodle built in language editor.

It is a good workaround until the plugin is fixed.

However it doesn't fix the password reset tool provided by moodle.
On the "email" field Moodle is able to see the account is not approved (a tooltip is displayed to say that). But a mail with the account confirmaiton link is still sent to the user

This plug in not working as it whished to do
Once the user submit the registration form, yes, the admin receiving the confirmation mail to approve / activate the user account.
But if admin didn't approve or user tried to log in with the credential that they created, they will see a window to resend the confirmation email and the user directly getting the confirmation /activation email.. so admin approved or not approved, the user account get activated

Unfortunately Moodle added the 'Resend Confirmation' feature as a core feature and my plugin has no control over it.

I opened a bug: https://tracker.moodle.org/browse/MDL-70381

Please vote and comment there.

Thank you.

I can't open the tracker. Would you please update the version for moodle 3.10+?

Hi Zuey, done, also added a link to instructions on how to patch Moodle while the fix is not published upstream.

Hi, With this option, the user email cannot validate. actually the activation emails with link should go to user email once admin approved the request.
is there any option to validate the user email address also as there is chance for misspell the email ID and later spam issue

Moodle 3.10.4 error update plugin with git and this error Eccezione - syntax error, unexpected 'll' (T_STRING)
thanks for any help

can this plugin rejected user from email admin? and then send email notification to the register email ?