I've been getting some spam signups recently, so this has come at the perfect timing.
I'll ask on the StopForumSpam forum incase its moreso to do with something their end
Just for some background, ive been having someone mass create users (im guessing via a script or such. A singular naming scheme like H1HGY52 as an example) they have not yet posted so I cannot IP ban them via flarum directly.
From what I can tell, they are using legitimate emails, likely purchased or perhaps compromised.
Since the emails themselves may be legitimate (I had since turned on email verification again to prevent any spam whilst im asleep), I was wondering if it would be best to have a toggle that would say not report the email address, only username and IP? I wouldnt want to bloat the list of emails on StopForumSpam's DB unnecessarily incase they get their accounts back / the emails are even just being used without access because they may pass some trust checks. I may leave reporting to their servers off for a time to be safe.
Otherwise from what I can see this is very good and much appreciated, thank you as always for your hard work 🙂
