Hi,
What happens:
1. The user signs up for an account.
2. The message appears “Please activate your account by following the link sent to your email address.”
3. However, even if they do not activate the account, they still can upload Profile Image in tds-my-account/?account_details.
– How to prevent this (image upload) from happening?
A potential security issue – a large number of “fake” accounts are registered with an unlimited quantity of image files uploaded.
Thank you.
Hi,
I think that you are right about this. It would be better to be able to access the editing section strictly after the account is activated using the email received by email. Indeed, this is a good thing and it is logical, it does not make sense to edit/set the profile data if the account is not yet activated.
Thank you!
So, it will be added on the list for future update?
Hi,
Yes, this suggestion has been added to the list of improvements for the tds-my-account element.
Thank you!
