Sheldon Rampton wrote:
Hi there...Sheldon Rampton here, at Disinfopedia.
After some irritating
and time-consuming encounters with trolls, we have decided that we want
to be able to require contributors to register and to provide a
confirmed email address when they do so.
It would separately be nice to require that an e-mail address _if given_
be confirmed, even where having an address is not itself required. (The
main concern here being the possibility of using wiki accounts to send
interuser e-mail with false return addresses.)
Reconfirmation would need to be required when the user changes the
address stored in their preferences; this leads to the possibility of
storing 'confirmed' and 'new' e-mail addresses to tide over the time
between changing and confirming.
(It *is* necessary to allow people to change their addresses. In the
real world, people gain and lose e-mail access at various institutions
over the course of their online lives.)
The address-required mode that Sheldon would like could then basically
require that the confirmed address be set in order to allow login.
For upwards compatibility on upgrading existing wikis, I'd recommend
using user_email for the 'unconfirmed' address and adding something like
'user_confirmed_email' for the confirmed one; thus users would be given
the opportunity to confirm their e-mail address when they next visit.
(But not doing so would not disable their accounts. Might show a message
up top akin to the 'new messages' notification.)
I'm not going to get to this anytime soon, so volunteers please go for it.
-- brion vibber (brion @
pobox.com)