I am using mollom to protect the user registration form. Yesterday I was administrating a few user issues and I noticed that the user ID's where unusual high.
It seems to me that even if mollom is blocking a new user registration, presumable by a spam bot, the user ID counter is still incremented.
I understand this is a small issue, but since this seems to be a new popular was of spammers to circumvent comment protection the user ID counter is going to be ridiculously high after some time. For a new site that went live a week ago and has virtually no traffic, the next ID fpr a new user is already over 100 with only 4 real users signed up. Can imagine what that number will be when the site gets busy...
Is there any way mollom can prevent this from happening?
| Comment | File | Size | Author |
|---|---|---|---|
| #1 | mollom-HEAD.user-register-count.1.patch | 1.46 KB | sun |
Comments
Comment #1
sunI can't believe that this is happening, so here's a patch that extends the existing test to verify that it is not happening.
Comment #2
sunSo the added tests prove that no user records are created when Mollom blocks a user registration.
This most likely means that some other module on your site does not respect that there are form validation errors and creates the user account nevertheless.
Comment #3
sunComment #4
tsvenson commentedI don't use any other contrib module that I know of that should affect user account. You can find a list with all the D7 contrib modules I use on this site here: http://www.drupalmill.com/blog/thomas/2011/01/02/18-modules-makes-drupal...
Looking at the user table the only users in there are the ones that have passed the Mollom test.
However, I did notice that when I created my own user account (not UID 1) it got UID 4. That was actually done on my local dev environment using the Add user feature logged in as UID 1.
Reason I suspected it was Mollom is that when I look at the Mollom graph it is showing lots of spam hits, but when I look at the log file and filter on mollom the numbers don't match up, there are very few entries in the log.
Maybe this could be a core issue? Unfortunately I am not experienced enough to dig into this much further.
I have another dev site that only has Advanced help, Global Redirect, Media, Styles and Wysiwig contribs. I added a second user there and it got ID 3. Makes me suspect a core issue even more.
Sorry for accusing Mollom, seemed logical for me at the time.
Comment #5
tsvenson commentedHave filed #1023130: UID number incrementions leaves big gaps to the core user.module now as I am quite sure this is a core issue after some more testing.