14
votes
Accepted
How did hackers manage to create a new user while "allow user registration" is set to "NO"?
The main reason for 3.6.4 update was exactly what happened to you!
Security Bulletin [20161001] - Core - Account Creation states
"Inadequate checks allows for users to register on a site when ...
- 3,007
6
votes
Accepted
Adding text to registration form
There are two ways you can do for that (both are safe from Joomla update / you won't loose the changes when updating your Joomla)
1. By using template override
Copy the file /components/com_users/...
- 2,418
4
votes
Joomla Registration: Remove unneeded fields
I know the recommended way of doing this is writing a plugin for. But I did remove repeat email and repeat password fields with a js trick:
jQuery(function ($){
$("#jform_password2-lbl")....
- 141
3
votes
Assign user to a specific group based on custom field selected
Write user plugin which will have the below file structure
plugins/user/plugins_name/
plg_add_group.php
plg_add_group.xml
plg_add_group.xml
- Write plugin manifest code here you can ...
- 411
3
votes
Accepted
User Registration Assign to Specific Group
Briefly, these are your main options:
Write a custom user registration component
Write a User Plugin that will handle the usergroup of the registered users
Use 3rd party Form extensions which ...
- 19.8k
3
votes
Verification code not found
I suspect that because you've got the 403 error message "Verification code not found" that the request is actually being rejected by Joomla itself. The language string ...
- 2,483
3
votes
Joomla User Registration Form Plugin not working - simple registration (PlgUserSimpleRegistration)
I finally found the answer
class PlgUserSimpleRegistration extends JPlugin
change "Plg" with "plg"
class plgUserSimpleRegistration extends JPlugin
It's working now
2
votes
Extending joomla registeration with a plugin
User plugin's onUserAfterSave function does not return any value, means there will be no action taken by calling function based on result of this function.
In core registration, the user will be ...
- 3,001
2
votes
Accepted
Extending joomla registeration with a plugin
I don't know the plugin and am not entirely sure I can think what you might have in mind that concerns you about a possible failure of this.
But my logic says that if a function fails under any ...
- 19.8k
2
votes
How did hackers manage to create a new user while "allow user registration" is set to "NO"?
There are many possible ways that the hacker has broken into your web,
I recommend you see these documents:
https://docs.joomla.org/Security
As to your question I would bet that the hacker could ...
- 1,664
2
votes
Register user via external script and a random password
I don't think there is a way, within the Joomla core, to force a password reset. There are quite a few extensions for that sort of thing though.
The activation value wont do anything, I think, if ...
- 716
2
votes
Joomla Registration: Remove unneeded fields
@DavidFritsch's answer was very helpful. A couple of problems I found though were:
A) You can't completely remove certain mandatory fields as it causes problems with data filtering on form submission ...
- 563
2
votes
How to avoid frequent spammers in my Joomla site
Note: This answer has been updated a few times.
As answer to your comments:
Hardly there will be so many real humans that will do nothing else than creating a fake account to your site every day, so ...
- 19.8k
2
votes
How to avoid fake users to register my Joomla site
I advise Admin tools
if you configured the right way is a excellent software
https://www.akeebabackup.com/products/admin-tools.html
- 41
2
votes
How to avoid fake users to register my Joomla site
Preventing fake accounts can be tricky. ReCaptcha v2 will work to a certain extent but is still not a 100% solution.
What I would suggest doing is going to the User Manager Options and setting the ...
- 26.9k
2
votes
Accepted
How do I override an .xml file in a Joomla component?
You should check Joomla Plugins and Events.
There are such events like onContentPrepareForm($form, $data) and (may be you'll want to use onContentPrepareData($context, $data) but you should be fine ...
- 1,130
2
votes
Custom fields not for all usergroups
(This answer has been updated from the original which suggested hacking Joomla code, to this much better solution proposed in the comment below - thanks to @Irata!)
Joomla includes the custom fields ...
- 2,483
2
votes
Accepted
Joomla 3.9.x Password Crypt Aid
Several pointers/recommendations regarding your resolving code for you and future researchers.
implode() has a default "glue" of an empty space. PHP Manual When you want to join array elements into ...
- 4,846
2
votes
How do I remove and/or change the 'name' field in the registration form so that I can ask for first and last name separately?
You can create another Registration controller and override the register() behavior.
<?php
class UsersControllerRegistration2 extends UsersController
{
public function register()
{
...
- 111
2
votes
Accepted
Where to place the file for user registration form
The format of the first one is correct, but I am guessing the template name is wrong. Generally YOOtheme names them yoo_name, so double check that.
/templates/yoo_templatename/html/com_users/...
- 1,901
2
votes
Joomla Field autopopulate on select of another field
You can use the "showon" field attribute to hide/show a field depending upon the value of another field. So you could have lots of Sections fields - one for each Division - and show only the ...
- 2,483
1
vote
Fake users created without using site registration form but still using overrides?
Is there a pattern to the emails used? For example, do these emails have a certain tld at the end? If that's the case, you can add a regex to the model blocking those emails.
Note: If your website ...
- 3,236
1
vote
OTP verification through SMS & Email while registration
I haven't personally investigated or tested any of the following, but a quick Google search for Joomla OTP verification revealed:
https://extensions.joomla.org/extension/openotp-authentication/
https:...
- 4,846
1
vote
Group of fields for different group of users
Before registration, any visitor will be a guest, so it does not make sense to create custom fields for different user groups in the registration form.
But if you want to assign the user group after ...
1
vote
How to customize user registration in Joomla 3.7?
If you want an easy way to do it just install the Easy Profile component from the JED. It integrates with registration and with advanced fields in the user's profile which they may edit. I use it a ...
- 1,834
1
vote
How to add Placeholder to Joomla User registration frontside screen
Add "hint" to "registration.xml" (components\com_users\models\forms\registration.xml)
Original field:
<field
name="name"
type="text"
description="...
1
vote
renderField with fields from custom plugin
OK, I finally got it to work looking through this page again.
To display one of the default fields I just had to enter renderField('name_of_field'), but to display one of the custom fields I have to ...
- 195
1
vote
Display ReCaptcha field after Joomla 3.7 user custom fields
replace the form output with this code:
<?php if ($field->type !== 'Captcha') : ?>
<div class="form-group">
<?php echo $field->label; ?>
<div class="...
1
vote
Strange login form I didn't create gets shown
On this page you see 2 login forms. The one of them you say you know from where it's coming from and it's your login module that you have chosen to display as per your desire.
Well, the other login ...
- 19.8k
1
vote
Accepted
How should I register my users without email address?
Okay, I found the solution for password encryption: https://stackoverflow.com/questions/21304038/joomla-3-2-1-password-encryption
jimport('joomla.user.helper');
$yourpass = JUserHelper::hashPassword($...
- 391
Only top scored, non community-wiki answers of a minimum length are eligible