Disallow users to change their email

From Kolmisoft Wiki
Jump to navigationJump to search

This option is available starting from MOR 9

Why should I disallow users to change emails?

You should disallow users to change their emails if you are using paypal or other payment gateways. Reason: users will not be able to use stolen paypal or other payment gateway account if you will additionally enable confirmation for suspicious payments in MOR. This bothers you, because the payments gateway user being hacked may ask payment gateway provider for refund.


P.S. If you are giving away some free balance - you might also consider using reCAPTCHA feature in MOR to defend yourself against automated bot registration attacks

How to allow/disallow users to change their emails?

To disallow users to change their emails tick a check box in Setup -> Settings -> Various menu:

Dont allow to change email.png


Other notes

  • If you are using payment gateways for security reasons it is recommended to disallow users to edit their emails. Also please see the Payments Confirmation section