Please see the attached. It shows no way to change the setting of the Newsletter module to stop auto subscribing new users.

Clicking on the highlighted item: "Standard list", fails to de-select it from being autosubscribed to new users.

This results in an email being sent, informing a new user they they have subscribed to the newsletter, moments before even the email telling them their application is awaiting approval.

An alternative to deselecting, if this is not possible, would be to find how to initiate auto-subscribe after the approval of a user rather than after their application.

EDIT:

The auto-signup bypasses registration, seeming to allow a user to bypass CAPTCHAs etc. Does this represent a back-door into the system?

CommentFileSizeAuthor
NewsletterAutoSubIssue.jpg48.74 KBtalvi

Comments

ParisLiakos’s picture

ParisLiakos commented
Category: bug » support
Status: Active » Fixed

Click on it having your Ctrl key pressed to deselect it

talvi’s picture

talvi commented

Yaaaay! Thanks rootatw you are a STAR:)
Would it be a feature request to ask that auto-subscribe could be enabled after registration approval? The email could be edited, as normal, to contain an unsubscribe link.

ParisLiakos’s picture

ParisLiakos commented
Title: Newsletter module - doesn't enable un-auto-subscribe » Subscribe new user after administration approval
Version: 7.x-1.0-beta9 » 7.x-2.x-dev
Category: support » feature
Priority: Major » Normal
Status: Fixed » Active

sure, why not

talvi’s picture

talvi commented

... because it might have been the form here to simply change the status of this one? But ok :) Thanks.

ahh.. you did it already :D

talvi’s picture

talvi commented
Issue summary: View changes

is this a security as well as a user interface issue?