Authentication: Email-based self-registration with admin confirmation
auth_emailadmin
Maintained by
Felipe Carasso
Provides email-based self-registration with admin confirmation instead of user confirmation.
1331 sites
720 downloads
95 fans
WARNING: Moodle 3.6 introduced a "Resend Confirmation" feature that enables unconfirmed users to self-confirm. A bug is opened with Moodle to fix this regression: https://tracker.moodle.org/browse/MDL-70381
You can manually apply the patch while Moodle is not fixed upstream. See https://github.com/hrimhari/moodle-auth_emailadmin/issues/45#issuecomment-770306239
Please read the INSTALL file carefully
Moodle plugin to provide email self-registration with admin confirmation.
The confirmation email is sent to the main admin account's email address.
When the admin clicks on the confirmation link, a "welcome" email is sent to the user.
Email body needs to be customized within the language file.
Based on default email-based self-registration module.
What's new in 1.4.4
================
fix(ISSUE-29): repairs config reference for Captcha after Settings API migration
What's new in 1.4.3
================
fix(ISSUE-17): repairs lock user fields, db update
feat(ISSUE-18): adds support for notifying users with user update capability
fix(ISSUE-21): updates config to use settings api
fix(ISSUE-25): makes use of lib function to gather profile fields
What's new in 1.4.2
================
fix(ISSUE-26): adds login and capability check to confirm.php (fixes phantom user-confirm)
Contributors
Felipe Carasso (Lead maintainer)
Please login to view contributors details and/or to contact them
Giovanni
Is there a way of adding a pending requests filter Browse list of users (/admin/user.php)?
..or make the last column with "Confirm | Resend email", to be available for sorting
Thanks..
Vybes, i believe thencolumn is "suspended".
Felipe
I have carried out several tests on the anomalous behavior of the plugin on different moodle platforms for which I offer the system administrator service, one of which for an institutional body, obtaining the same results.
"When the user tries to log in with his credentials, he can access the site without having to wait for the authorization of the platform administrator." This situation is not acceptable in some contexts.
Hearty Greetings
Giovanni
Thank's in advance
Domenico
Thank you,
Felipe
Felipe
Here is how to reproduce the bug (the default email registration is disabled) :
1. User creates account
2. After submitting the form, Moodle says "ok, an admin will confirm your account, just wait"
3. Before the admin validates the account, if the user tries to log in, Moodle says "your account is not activated now, I can send you an email with the confirmation link"
4. If the user click on the button the mail is sent and the user is able to bypass the admin confirmation
Any idea to fix this? We have a lot of users bypassing the admin validation...
Thank you
"You account is pending activation, as soon as it has been activated you will receive an email from our Administrator".
You can find this message at: moodledata/lang/en_local/moodle.php . If the file or folder don't exist you can create it by yourself.
and the code:
defined('MOODLE_INTERNAL') || die();
$string['emailconfirmsent'] = '
Pending Activation
Your account is waiting activation from our admin
After activation you will receive an email at the email address you have used during your registration.
Company Team
';$string['emailresetconfirmsent'] = 'In order to be able to sign in your account must have been approved from our admin. When your account has been activated you will receive an email at the email address you have used during your registration.';
$string['mustconfirm'] = ' ';
Always remember to clear cache after editing files.
I was able to hide the button with CSS and edit strings text using the Moodle built in language editor.
It is a good workaround until the plugin is fixed.
However it doesn't fix the password reset tool provided by moodle.
On the "email" field Moodle is able to see the account is not approved (a tooltip is displayed to say that). But a mail with the account confirmaiton link is still sent to the user
Once the user submit the registration form, yes, the admin receiving the confirmation mail to approve / activate the user account.
But if admin didn't approve or user tried to log in with the credential that they created, they will see a window to resend the confirmation email and the user directly getting the confirmation /activation email.. so admin approved or not approved, the user account get activated
I opened a bug: https://tracker.moodle.org/browse/MDL-70381
Please vote and comment there.
Thank you.