Deactivated account and banned IP, still can post ads

[Aficionado]

This morning i Deactivated a spam account from Egypt and also banned his IP via Osclass Ban users.

Still, this user can post ads until this very moment. From the same IP.

[_CONEJO]

Did you deactivated or disabled the account?

[Aficionado]

Did you deactivated or disabled the account?

Deactivated. AND banned the IP.

[_CONEJO]

Users could re-activate their accounts. When the login, a message will appear "your account needs to be activated.... send email" . A disabled account could only be enabled by the admin (or a plugin).

The ban on the IP should have worked, I just tested it and it stops me, if you are behind some proxy... it may change the IP... but then it should show a different one. We should definitely investigate this issue.

[Aficionado]

Users could re-activate their accounts. When the login, a message will appear "your account needs to be activated.... send email" . A disabled account could only be enabled by the admin (or a plugin).

The ban on the IP should have worked, I just tested it and it stops me, if you are behind some proxy... it may change the IP... but then it should show a different one. We should definitely investigate this issue.

BUT the account shows as inactived in my user admin (the RED Activate shows).

Also about IP blocks, you promised last time

https://forums.osclass.org/3-6-x/ip-ban-rules-34380/

but never did.

 

[Aficionado]

Doing some more tests myself, trying to replicate this. I will update here with my findings.

[Aficionado]

Users could re-activate their accounts. When the login, a message will appear "your account needs to be activated.... send email" .

Somehow i don't see what you say. A deactivated user, just sees this:

"The user has not been validated yet"

No option as you describe above.

[Aficionado]

Ok, what i found is that is the user is LOGGED IN and posts ads, if you DEactivate him ... it doesn't matter until he logs off.

Apparently no check is done ?

[_CONEJO]

The ban on the IP should have worked, it's checked on publish.

I opened this issue regarding the deactivated/disabled users  https://github.com/osclass/Osclass/issues/2205

[Aficionado]

The ban on the IP should have worked, it's checked on publish.

I opened this issue regarding the deactivated/disabled users  https://github.com/osclass/Osclass/issues/2205

The IP ban ... i suspect that something is not right when wildcards are used. In my case when an IP is a problem, i ban the whole last part (ex: 154.118.59.*). Maybe that * creates problems.