Development Discussion Board

I think the post confirmation page isn't necessary and merely adds a delay to the user experience. Could this page be removed? Instead, the user could be instantly redirected to his post.

Sure. If activation is disabled just skip the first form (and activation) and add the email field to the second form.

Ah, like that. I read naderman's statement the wrong way.

Anyway, wouldn't SFTP support effectively give the webserver permission to write to the files it executes?

imkingdavid wrote:Either way, they should be required to enter a new password to finalize registration.

Why would you require that?

We ultimately there should only be one email required for activating/logging in initially. If we have one form for just the email address, which sends an activation link, and then the second form for the username, which then sends a random password, that is just extra work to have to keep checking ...

naderman wrote:Proper file permissions do not allow the webserver to write to the files it executes.

Why not?

I agree with being able to login with either username or email, but there are some cases in which users might have multiple usernames associated with one email address that, which could become problematic. If multiple rows match, you could fallback to matching on username only. I think using JS for...

(S)FTP access looks like an ugly work around. Why can't file permissions be set properly?

Erik Frèrejean wrote:Why not simply login the user when he clicks the activation link?

+1
One might even go one step further and do registration after email address verification. Would avoid unregistered users.