Tootfinder

So the wave of spam-registrations I figured wouldn't really affect us here on the tiny server with registrations closed and clear instructions that only users who know us personally are welcome and we will check.
Turns out no. Our server has run out of email credits from sending lots of email-validation messages.
Hope everyone remembers their passwords, coz password-reset emails and notification emails and whatnot won't be going out for a little while.
All .jp addresses and about half of them bounced as not real email anyway.
Started 10am yesterday, not an hour gone by without some since.
Nothing even clicking those activation links I don't think, certainly nothing filling in the "So who do you know then?" form to create an account.
With email notifications not working, replies to moderation actions could be slower. Not that there's ever much really.
I've turned registration off entirely. Probably should be that way anyhow really here. If you want an account, ask someone who has one personally.
#spam #mastodon

The software in question is Arbiter Sports (arbitersports.com).
The headliner among the •numerous• software flaws I encountered in this single registration process: the site fails form validation when making subsequent edits — or no edits, just resaving unchanged! — to a form that the system •had already accepted•.
The only user-visible message is “Required Information Missing.” (There was no required info missing; again, it already passed validation.) The problem, visible only in the Javascript console, was that the site was rejecting non-alphanumeric characters in a phone number it had pulled from its own database.
The fix was to make some keystrokes in the offending field to force the site’s Javascript to re-sanitize it for the back end.
2/3