You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The application currently allows users to register using any email address without verifying its authenticity. This can lead to the creation of accounts with fake or invalid email addresses, posing a security risk and undermining the integrity of the user system.
Explain bug encounter!
When users register for an account, there is no verification step to confirm whether the email address provided is valid. As a result, any email address, including non-existent or improperly formatted ones, can be used to create an account.
Steps to Reproduce the Behavior
Go to the Registration Page:
Navigate to the user registration form on the website or app.
Enter Any Email Address:
Input any email address, even if it's fake or improperly formatted (e.g., "[email protected]").
Submit the Form:
Complete the registration by submitting the form.
Account Creation Without Verification:
Observe that the account is successfully created without any email verification process, allowing login using the unverified email address.
Expected behavior.
Upon registration, users should receive a verification email to confirm the validity of their provided email address.
The account should only be activated after successful verification, ensuring that all registered users have a valid and confirmed email.
Screenshot.
Please assign this issue to me for Hacktoberfest and GSoC-ext
The text was updated successfully, but these errors were encountered:
✅ This issue has been successfully closed. Thank you for your contribution and helping us improve the project! If you have any more ideas or run into other issues, feel free to open a new one. Happy coding! 🚀
Describe the bug.
The application currently allows users to register using any email address without verifying its authenticity. This can lead to the creation of accounts with fake or invalid email addresses, posing a security risk and undermining the integrity of the user system.
Explain bug encounter!
When users register for an account, there is no verification step to confirm whether the email address provided is valid. As a result, any email address, including non-existent or improperly formatted ones, can be used to create an account.
Steps to Reproduce the Behavior
Go to the Registration Page:
Enter Any Email Address:
Submit the Form:
Account Creation Without Verification:
Expected behavior.
Screenshot.
Please assign this issue to me for Hacktoberfest and GSoC-ext
The text was updated successfully, but these errors were encountered: