Since the "member" sub-system uses the email address as the member identifier, I need to make sure the person registering is the "owner" of that email address. How do I do that within SS?
On other systems, the user is sent a confirmation email to verify that they are in fact the owner of that email address but I don't see that capability in SS.
It looks to me like I could register as "email@example.com" and if a "real" firstname.lastname@example.org wanted to register he would be unable to do so unless an administrator manually deleted the bogus member record.
I'm new to this so I may be missing something obvious and if so apologize in advance.
You're correct, no built in way to do this in SS either in the core or any of the major modules. It would be quite useful to have, maybe not in the 'core' as such but as something in the forum module / documentation on how to do it. To get something like that working would involve tweaking the default member object, adding a hook when you create the member to send an email (both these member changes you could use a decorator for), and the functionality of approving a member when they click the link. Nothing super hard but it does touch on quite a few things so you might want to cover the tutorials and get a decent grasp on things before you attempt it.
I am *very* new to SS. I just finished reading the Schommer and Broschart book, SilverStripe, and am starting pass 2 of the book with specific features I need in mind for a project that I want to write with SS. -- thus the member validation question.
If I get some code working, I'll pass it along to the group.
In the mean time if anyone else has any thoughts on this, please let me know. I'm pretty sure this capability falls within best-practices for web site member authentication.
Hi - I've done this for a project, it's not TOO hard when you know how / where to look. My code is pretty specific to my project, but if you are still stuck let me know and I will be happy to help you out.
@timcole I'm interested in how you did this. I'm looking to replicate a similar functionality to the forums registration, but before adding the user I want to send a validation email with a link and code in it. Clicking the link finalizes their registration. If they try to login I'd like it to say "E-mail validation required, enter code here or request new code"
Something like that, I thought for sure there would be a module for this, it seems so common. I believe I will release this as a module if I end up coming up with a robust solution.