Unverified Email Creating Posts

eddiewebb

I thought accounts had to be "activated" to post, but for past week a bunch of fake emails at outlook.kr have been posting away.

I know the emails never made it to the user because I also run the mail server getting the undeliverable bounces from the bogus emails.

But then why is the account allowed to POST?

GreXXL

eddiewebb unverified accounts cannot post. Do you have Audit Log (https://discuss.flarum.org/d/24432-audit-log-free) installed? Maybe the users do have valid e-mails, but change them so it doesn't get flagged? You might want to share your php flarum info output if that is not the case.