Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[issue] Spam accounts gets created trough local account (no way?!) #32556

Open
0n1cOn3 opened this issue Nov 19, 2024 · 4 comments
Open

[issue] Spam accounts gets created trough local account (no way?!) #32556

0n1cOn3 opened this issue Nov 19, 2024 · 4 comments
Labels
issue/needs-feedback For bugs, we need more details. For features, the feature must be described in more detail issue/not-a-bug The reported issue is the intended behavior or the problem is not inside Gitea

Comments

@0n1cOn3
Copy link

0n1cOn3 commented Nov 19, 2024

Description

Spammers found a way to register an account without using the given Login Providers (as you can see from the screenshot below)

Gitea Version

1.22.0

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

image
image

Git Version

2.34.1

Operating System

Ubuntu 20.04 LTS

How are you running Gitea?

Docker-Compose V2

Database

MySQL/MariaDB

@0n1cOn3 0n1cOn3 changed the title [BUG] Spam accounts gets created trough local account creations [BUG] Spam accounts gets created trough local account (no way?!) Nov 19, 2024
@lunny lunny added issue/not-a-bug The reported issue is the intended behavior or the problem is not inside Gitea and removed type/bug labels Nov 19, 2024
@lunny
Copy link
Member

lunny commented Nov 19, 2024

You can enable captcha and other methods to avoid spammers. If you want to disable local user, it's duplicated of #13606

@lunny lunny added the issue/needs-feedback For bugs, we need more details. For features, the feature must be described in more detail label Nov 19, 2024
@0n1cOn3
Copy link
Author

0n1cOn3 commented Nov 19, 2024

Thank you ! 🥇

@0n1cOn3 0n1cOn3 closed this as completed Nov 19, 2024
@0n1cOn3
Copy link
Author

0n1cOn3 commented Nov 19, 2024

I have saddly to say, that Captcha is already enabled.
And the given thread from you is also saddly not really helpful to get that issue fixed :-(

@0n1cOn3 0n1cOn3 reopened this Nov 19, 2024
@0n1cOn3 0n1cOn3 changed the title [BUG] Spam accounts gets created trough local account (no way?!) [issue] Spam accounts gets created trough local account (no way?!) Nov 19, 2024
@jiriks74
Copy link

I have saddly to say, that Captcha is already enabled.

I've enabled reCAPTCHA and verified that it appears on the registration website. Sadly it does nothing to stop the account spam I've been battling over the last few days.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
issue/needs-feedback For bugs, we need more details. For features, the feature must be described in more detail issue/not-a-bug The reported issue is the intended behavior or the problem is not inside Gitea
Projects
None yet
Development

No branches or pull requests

3 participants