Snitz Forums 2000 - Profile Name Being Changed By User

Snitz Forums 2000

Snitz Forums 2000

Home | Profile | Register | Active Topics | Members | Search | FAQ

Username:	Password:
Save Password
Forgot your Password?

All Forums

Help Groups for Snitz Forums 2000 Users

Help: General / Classic ASP versions(v3.4.XX)

Profile Name Being Changed By User

New Topic

Printer Friendly

Author

Topic

ZORRO
Starting Member

13 Posts

Posted - 07 November 2014 : 12:34:38

I just noticed a feature that is a small problem. We dont like to encourage the use of fake real names in the forum. The moniker can be anything at all but the profile should always have a real name. When we allowed funny and fake names that led to some nasty posts...

Therefore, we have required that all requests to join the Forum be reviewed first, then, if they appear legitimate, we permit it.

But, I just learned that the user can subsequently, without notice, change his "Real Name", to whatever he pleases, thus avoiding the careful review. Ugh! We now have fake users again.

Is there a simple way to "lock" in the reviewed user Real Name fields?

Thanks for any ideas.

HuwR
Forum Admin

United Kingdom
20608 Posts

Posted - 07 November 2014 : 12:50:52

well, of course you could change the form fields to be readonly, however I have an issue with this, what if I legitimately change my name (get married, change by deed poll etc etc) you will then have a fake name in the forum not my real name which I can no longer update. Also, who are you (or more importantly HOW) to decide what is my real name ? If I sign up as John Edwards, would you allow me in even though that is not my name ??

MVC .net dev/test site | Snitz .NET Core running on Raspberry Pi

ZORRO
Starting Member

13 Posts

Posted - 08 November 2014 : 05:46:59

Thanks for the entertaining response Huw. Can you advise how I can change the name fields to read-only once a user is registered? That's what we must do, if possible.

AS to your other concerns: (1) How often do you legally change your name? That's ridiculous. I have no problem updating that instantly for any user in that situation; (2) Who am I -- I am the Forum Moderator -- its my responsibility to try to control the spammers and chaos. No, I do NOT "decide" your name, instead I must "determine" if your application is an obvious deceit with intent to harm our users. Thats what I do. We are under constant assault from hacker gangs from Russia and China trying to join the Forum to distribute spam. This is not new. Its a fact of web life.

Carefree
Advanced Member

Philippines
4224 Posts

Posted - 08 November 2014 : 06:16:13

quote:
Originally posted by ZORRO
Can you advise how I can change the name fields to read-only once a user is registered?

"pop_profile.asp"


Look for the following lines (appx 1349-1352):

			if strfullName = "1" then
				strSql = strSql & ",	M_FIRSTNAME = '" & ChkString(Request.Form("FirstName"), "SQLString") & "'"
				strSql = strSql & ",	M_LASTNAME  = '" & ChkString(Request.Form("LastName"),"SQLString") & "'"
			end if

Delete them or comment them out.

HuwR
Forum Admin

United Kingdom
20608 Posts

Posted - 08 November 2014 : 16:21:47

quote:
No, I do NOT "decide" your name, instead I must "determine" if your application is an obvious deceit with intent to harm our users. Thats what I do. We are under constant assault from hacker gangs from Russia and China trying to join the Forum to distribute spam. This is not new. Its a fact of web life.

I don't dispute that, but preventing someone from changing their name after they have been accepted will not change that.

MVC .net dev/test site | Snitz .NET Core running on Raspberry Pi

ZORRO
Starting Member

13 Posts

Posted - 08 November 2014 : 19:52:18

This is a problem I had not anticipated. And I'm grateful for the technical assist from CareFree, but not real happy with this as an ultimate solution. It solves one rare bad problem but creates a larger inconvenience.

We turned off automatic Forum registrtation when the problem of phony users became apparent. I would like for our forum members to be able to mod their name as they see fit whenever they like. And, in fact, after running a year to year comparison today, I learned that has been happening legitimately (mostly) for exactly the reasons you offered.

But the downside, and this is the difference, those post-registration changes occur silently unbeknownst to me or anyone else. That's very different from an initial registration where we are afforded the opportunity (and responsibility) to invetaigate as thoroughly as we may deem neccessary before granting the run of the Forum to a new user.

Carefree
Advanced Member

Philippines
4224 Posts

Posted - 09 November 2014 : 02:39:52

quote:
Originally posted by ZORRO

those post-registration changes occur silently unbeknownst to me or anyone else

Not a problem. Add in a PM or Email to the forum admin upon change of real name by a user. For Email, you could do this:

"pop_profile.asp"


Look for the following lines (appx 1349-1352):

			if strfullName = "1" then
				strSql = strSql & ",	M_FIRSTNAME = '" & ChkString(Request.Form("FirstName"), "SQLString") & "'"
				strSql = strSql & ",	M_LASTNAME  = '" & ChkString(Request.Form("LastName"),"SQLString") & "'"
			end if

Change them to say:

			if strfullName = "1" then
				strSqlC="SELECT M_FIRSTNAME, M_LASTNAME FROM " & strMemberTablePrefix & "MEMBERS WHERE MEMBER_ID=" & MemberID
				Set rsC=my_Conn.Execute(strSqlC)
				If not rsC.EOF Then
					strMFN=rsC("M_FIRSTNAME")
					strMLN=rsC("M_LASTNAME")
					rsC.Close
				End If
				Set rsC = Nothing
				If (ChkString(Request.Form("FirstName"), "SQLString")<> strMFN) or (ChkString(Request.Form("LastName"),"SQLString") <> strMLN) Then
					strSqlC="SELECT M_FIRSTNAME, M_EMAIL FROM " & strMemberTablePrefix & "MEMBERS WHERE MEMBER_ID=" & intAdminMemberID
					Set rsC=my_Conn.Execute(strSqlC)
					If not rsC.EOF Then
						strRecipientsName = rsC("M_FIRSTNAME")
						strRecipients = rsC("M_EMAIL")
						strFrom = strSender
						strFromName = strForumTitle
						strSubject = strForumTitle & " Name Change "
						strMessage = strDBNTUserName & " changed his/her real name from " & strMFN & " " & strMLN & ".  The new name is:  " & ChkString(Request.Form("FirstName"), "SQLString") & " " & ChkString(Request.Form("LastName"),"SQLString") & "." & vbNewline & vbNewline
						%>
						<!--#INCLUDE FILE="inc_mail.asp" -->
						<%
						rsC.Close
					End If
					Set rsC = Nothing
				End If
				strSql = strSql & ",	M_FIRSTNAME = '" & ChkString(Request.Form("FirstName"), "SQLString") & "'"
				strSql = strSql & ",	M_LASTNAME  = '" & ChkString(Request.Form("LastName"),"SQLString") & "'"
			end if

HuwR
Forum Admin

United Kingdom
20608 Posts

Posted - 09 November 2014 : 03:27:43

quote:
But the downside, and this is the difference, those post-registration changes occur silently unbeknownst to me or anyone else. That's very different from an initial registration where we are afforded the opportunity (and responsibility) to invetaigate as thoroughly as we may deem neccessary before granting the run of the Forum to a new user.

That is indeed a fair point, hopefully carefree's solution will be helpful

MVC .net dev/test site | Snitz .NET Core running on Raspberry Pi

ZORRO
Starting Member

13 Posts

Posted - 11 November 2014 : 07:45:49

That's an excellent solution! Thank you for your technical exprtise CareFree. That is exactly what we needed to do. I just tested it -- works perfect -- change implemented.

Carefree
Advanced Member

Philippines
4224 Posts

Posted - 11 November 2014 : 10:13:54

Glad we could help.

Topic

New Topic

Printer Friendly

Jump To:

Snitz Forums 2000

© 2000-2021 Snitz™ Communications

This page was generated in 0.39 seconds.

Powered By: Snitz Forums 2000 Version 3.4.07