Question

I removed some lines from the registration page and in NewUserTemplate, but I did not change anything.

However, when a new user registers, all works well, except that the email address is not copied to the user form, it stays empty.

The UserForm entry is Email, the name in the TWikiRegistration is Twk1Email

Any ideas?

Environment

-- JosMaccabiani - 19 Apr 2006

Answer

If you answer a question - or someone answered one of your questions - please remember to edit the page and set the status to answered. The status selector is below the edit box.

The "Email" field is not expanded in the user topic, to prevent email harvesting. The email address for a user is passed to the password manager for storage (conventionally it is stored in the .htpasswd file).

-- CrawfordCurrie - 20 Apr 2006

This should be configurable. We cannot force an e-mail policy on a web admin.

-- PeterThoeny - 20 Apr 2006

Agreed.

-- CrawfordCurrie - 21 Apr 2006

Agreed ;-). Is there a way to get around this? E.g. copying the value to a different parameter first, then including that other parameter (e.g. Twk1EmailAddress) in the form?

Also: should I post something about this in the Bugs web?

-- JosMaccabiani - 22 Apr 2006

Please do if there isn't already an item posted.

-- PeterThoeny - 23 Apr 2006

While waiting for the new configurable behaviour, you could make this little patch:

Index: lib/TWiki/UI/Register.pm
===================================================================
--- lib/TWiki/UI/Register.pm    (revision 9885)
+++ lib/TWiki/UI/Register.pm    (working copy)
@@ -898,7 +898,8 @@
         # from no key at all.
         if ( $name eq 'Email' ) {
             # Don't paste the e-mail address in the user topic (prevent e-mail harvesting)
-            # $leftoverText .= "\t* E-mail: $value\n";
+            $meta->putKeyed( 'FIELD',
+                        { name => $name, value => $value, title => $title } );
         } else {
             $meta->putKeyed( 'FIELD',
                         { name => $name, value => $value, title => $title } );

(This makes the behaviour for the Email field the same as for the other fields, i.e. copies it to the new user topic).

-- SteffenPoulsen - 23 Apr 2006

Steffen, great, that works! (obviously

Could you do some of the same magic for the LoginName? I can't see it in Register.pm near the e-mail field.

Thanks a lot

-- JosMaccabiani - 26 Apr 2006

Problem is that putting it in there too would mean the info is duplicated with TWikiUsers

People might change it but it would have no effect. Besides, why do you want to show this info? It could be a security risk.

-- MartinCleaver - 26 Apr 2006

Hmm.. OK, so the form fields of UserForm don't have to be identical to the registration fields? Good to know, I'll remove it altogether. As you say, changing it wouldn't have an effect anyway...

-- JosMaccabiani - 26 Apr 2006

For reasons of courisity I'd still interested in what would be needed to get the LoginName copied to the UserForm - even if its redundant, duplicated and with no effect?

-- SteffenPoulsen - 26 Apr 2006

I do not see a security risk if the login name is duplicated in the user homepage. As Martin noted, it could be confusing if the user changes it and does not see any effect.

-- PeterThoeny - 27 Apr 2006

it seems to be considered a security risk in most network administration circles - have you ever noticed how systems don't generally tell you if you typed the username wrong, or the password?

The general rule of thumb, is never to reveal more authentication information than is necessary - login name is one of those things that only very few people need to know - the user themselves, and administrators. We quite cleverly give the possiblity to abstract the visible name from the authentication name and the email - please understand that this is often the more secure situation.

-- SvenDowideit - 27 Apr 2006

That makes sense then. However, it does not make a difference since the login name is displayed in the public TWikiUsers topic anyway.

-- PeterThoeny - 27 Apr 2006

Along with the email address, this should be displayed on the user's page using the UserInfoPlugin; it should not be hardcoded.

This would allow both to be displayed to the user and administrators but - depending on permissions - hidden from other types of users.

-- MartinCleaver - 29 Apr 2006

For version 4.0.3.

We dont use a local .htpasswd file but use a seperate kerberos authentication. After registration I only see some of the information entered. Email and LoginName are blank. Also the LoginName is not the same the Twiki name so I would like to see this.

{AntiSpam}{HideUserDetails} is set off

Where does the email address get stored and how may I see the otehr fields?

-- PeterJones - 28 Jun 2006

Better to open a new support question for this one.

-- PeterThoeny - 01 Jul 2006

-- CarlMcKinney - 05 Jan 2007

-- CarlMcKinney - 05 Jan 2007

So, I DON'T want the email address a new user must enter to register to show up in the user form or their personal topic; but I do want to give them the option of entering an email address that WILL show up. So I added a line on the registration form that feeds the result to the user form through a Twk0Email variable... but it still doesn't show up in the form. In fact, no matter what I call this variable, it won't appear on the form. Is the registration process set up so that NO email addresses can be passed on to the user form?

-- CarlMcKinney - 05 Jan 2007

Closing the orginal question as "answered". Please open a new support question if you have additional questions.

-- PeterThoeny - 07 Feb 2007