registration form bugs

gineta · **Joined:** Tue Dec 04, 2007 12:05 am **Posts:** 295

hi

1.- I go to the registration for and register one user

2.- a2billing send the link for activate account.

3.- received the email and activate the account

4.- received the email of confirmation

I go to costumer UI and login with the number and password
and say this account is block

I look this user in administration UI and the user in the option
ACTIVATED is NO and SIGNUP CONFIRMATION IS YES

I change and work . WHY this is no make automatic when the user respond to the confirmation

thanks
regards
gineta

:idea:

stavros · **Posted:** Sat Mar 22, 2008 2:41 pm

I can't reproduce this problem with the signup interface.
What versions are you running of everything? A2B, Asterisk, PHP, SQL, etc?

lnb2g · **Joined:** Sat Jul 28, 2007 5:51 am **Posts:** 79

gineta wrote:

hi

1.- I go to the registration for and register one user

2.- a2billing send the link for activate account.

3.- received the email and activate the account

4.- received the email of confirmation

I go to costumer UI and login with the number and password
and say this account is block

I look this user in administration UI and the user in the option
ACTIVATED is NO and SIGNUP CONFIRMATION IS YES

I change and work . WHY this is no make automatic when the user respond to the confirmation

thanks
regards
gineta

:idea:

how did you get your signup to send confirmation. I have signed up its said "thank you blah blah" but the confirmatin email never sent out to customer.

gineta · **Joined:** Tue Dec 04, 2007 12:05 am **Posts:** 295

have you configurated sendmail?
I think here i spossible a idea how start problem with registration form
http://www.youtube.com/watch?v=ZLvb-nAb7H4

stavros · **Posted:** Thu Sep 25, 2008 12:24 pm

gineta wrote:

I think here i spossible a idea how start problem with registration form http://www.youtube.com/watch?v=ZLvb-nAb7H4

If we used GETs rather than POSTs and we didn't validate input at all, then the attack shown in that video might be applicable. I keep a very close eye on my mailserver and I've never seen any evidence that A2B is being used to send unauthorised emails.

gineta · **Joined:** Tue Dec 04, 2007 12:05 am **Posts:** 295

stavros wrote:

gineta wrote:

I think here i spossible a idea how start problem with registration form http://www.youtube.com/watch?v=ZLvb-nAb7H4

If we used GETs rather than POSTs and we didn't validate input at all, then the attack shown in that video might be applicable. I keep a very close eye on my mailserver I've never seen any evidence that A2B is being used to send unauthorised emails.

in the server before is hack people use the mail server is also for thsi i have my eyes now also
anywhere i not stop my investigation about security in a2billing

lnb2g · **Joined:** Sat Jul 28, 2007 5:51 am **Posts:** 79

thank you for a hint, I have it to send mail now. but the account is not activate even though it said "Thank your your account successfully activated, blah, blah" Have you ever run into this problem before?

gineta · **Joined:** Tue Dec 04, 2007 12:05 am **Posts:** 295

lnb2g wrote:

thank you for a hint, I have it to send mail now. but the account is not activate even though it said "Thank your your account successfully activated, blah, blah" Have you ever run into this problem before?

why you no try to read a2billing.conf secure you get there the solution

lnb2g · **Joined:** Sat Jul 28, 2007 5:51 am **Posts:** 79

gineta wrote:

hi

1.- I go to the registration for and register one user

2.- a2billing send the link for activate account.

3.- received the email and activate the account

4.- received the email of confirmation

I go to costumer UI and login with the number and password
and say this account is block

I look this user in administration UI and the user in the option
ACTIVATED is NO and SIGNUP CONFIRMATION IS YES

I change and work . WHY this is no make automatic when the user respond to the confirmation

thanks
regards
gineta

:idea:

I have same problem. I change "activatedbyuser=yes" and it work. But I dont want it tobe like this. I want there is a confirmation email and will be activated by that link by user.

If i changed "activatedbyuser=no", there is a confirmation email but when I click on it, it happened like your way. Did you figure this out?

stavros · **Posted:** Fri Sep 26, 2008 8:44 am

I believe you need to set both 'activated' and 'activatedbyuser' to YES to get the results you desire. I think. The caffeine hasn't kicked in yet, so I've got my doubts.

provided by Star2Billing S.L.

registration form bugs

Who is online