Commit 39ab6e57 authored by Birte Kristina Friesel's avatar Birte Kristina Friesel
Browse files

allow registration to be denied for certain IPs, e.g. known spammers 

(yes, there are actually spambots flooding people with unsolicited
registration e-mails)
parent 64e20b50

lib/Travelynx/Controller/Account.pm

+16 −0
Original line number Diff line number Diff line
@@ -85,6 +85,22 @@ sub register { 
		return;

	}



	if ( my $registration_denylist

		= $self->app->config->{registration}->{denylist} )

	{

		open( my $fh, "<", $registration_denylist )

		  or die("cannot open($registration_denylist)");

		while ( my $line = <$fh> ) {

			chomp $line;

			if ( $ip eq $line ) {

				close($fh);

				$self->render( 'register', invalid => "denylist" );

				return;

			}

		}

		close($fh);

	}



	if ( my $error = $self->users->is_name_invalid( name => $user ) ) {

		$self->render( 'register', invalid => $error );

		return;

templates/_invalid_input.html.ep

+4 −0
Original line number Diff line number Diff line
@@ -78,6 +78,10 @@ 
					<p>Aus Sicherheitsgründen kann der Account nur nach Passworteingabe

					gelöscht werden.</p>

				% }

				% elsif ($invalid eq 'denylist') {

					<span class="card-title">Registrierung deaktiviert</span>

					<p>Für diesen Zugang ist derzeit keine Registrierung möglich.</p>

				% }

				% else {

					<span class="card-title">Fehler</span>

					<p><%= $invalid %></p>