Simple Machines Community Forum

SMF Development => Feature Requests => Topic started by: galanb on February 15, 2018, 03:53:17 PM

Title: Registration Agreement at First Login
Post by: galanb on February 15, 2018, 03:53:17 PM
My use of SMF is for a non-public/private forum.  I have edited the Registration Agreement to reflect the forum location's legal jurisdiction(s), and it also includes other identifying location and usage information that may be useful to hackers.  Anyone landing on the home page of the forum can click on the Registration button and the contents of the Registration Agreement are displayed.  As noted above, this is a potential security exposure due to the agreement's contents.
I could take some of the location and identifying information out but there appears to be no other place or mechanism than at registration to obtain consent to the forum's terms and conditions.  My preference is to maintain complete flexibility of the content of the registration agreement, such that I don't have to worry about potential security exposures as a consequence of the wording.

I would like to suggest a installation configuration setting that allows the Registration Agreement to be presented at either registration (as now) or at the user's first login, or better still, at the user's next login (which would enable consent of future revisions to the agreement.)  This would enable Admins, such as myself, who review and approve user registrations prior to forum access, can ensure only approved users get to view the contents of the registration agreement.


Thanks for considering this.
Title: Re: Registration Agreement at First Login
Post by: br360 on February 15, 2018, 03:55:38 PM
This mod may help- https://custom.simplemachines.org/mods/index.php?mod=3279
Title: Re: Registration Agreement at First Login
Post by: Kindred on February 15, 2018, 04:19:13 PM
dunno about that one... but this one would probably suit your needs


https://custom.simplemachines.org/mods/index.php?mod=1364


set that topic in a board only visible to users  after registration - they will be taken to the post on their first login (or, if you use the reset option, every user has to re-read the post on the next login after the reset)



I don't think this request would ever be a feature, since it seems to be an edge use-case specific to your site.
Title: Re: Registration Agreement at First Login
Post by: galanb on February 15, 2018, 04:45:33 PM
Quote from: br360 on February 15, 2018, 03:55:38 PM
This mod may help- https://custom.simplemachines.org/mods/index.php?mod=3279 (https://custom.simplemachines.org/mods/index.php?mod=3279)


Thanks the quick reply br360.  I'll take a look at it.  To use this I would need to disable the config setting to show the registration agreement at registration and get the consent at login.  It looks like it would also address the situation where the agreement needs to be updated.
[size=78%] [/size]
Title: Re: Registration Agreement at First Login
Post by: galanb on February 15, 2018, 04:57:41 PM
Quote from: Kindred on February 15, 2018, 04:19:13 PM
dunno about that one... but this one would probably suit your needs


https://custom.simplemachines.org/mods/index.php?mod=1364


set that topic in a board only visible to users  after registration - they will be taken to the post on their first login (or, if you use the reset option, every user has to re-read the post on the next login after the reset)



I don't think this request would ever be a feature, since it seems to be an edge use-case specific to your site.

Thanks, also, Kindred for your quick reply.  I had looked at that one previously.  While it forces the user to the article, it appears that it does not provide any mechanism for the user to confirm consent (by clicking an acknowledgement button).

Not so sure I agree that my request is an edge-case because businesses have a need for privacy and confidentiality that an open public forum board doesn't...

I do appreciate your help: thank you!
Title: Re: Registration Agreement at First Login
Post by: Kindred on February 15, 2018, 07:14:25 PM
Well, most would als not put that sort of information in the user agreement...    I actually can't quite conceive of a user agreement that would require a sit eowner to out anything in it that would be desired by hackers
Title: Re: Registration Agreement at First Login
Post by: galanb on February 15, 2018, 07:38:42 PM
Quote from: galanb on February 15, 2018, 04:45:33 PM
Quote from: br360 on February 15, 2018, 03:55:38 PM
This mod may help- https://custom.simplemachines.org/mods/index.php?mod=3279 (https://custom.simplemachines.org/mods/index.php?mod=3279)


Thanks the quick reply br360.  I'll take a look at it.  To use this I would need to disable the config setting to show the registration agreement at registration and get the consent at login.  It looks like it would also address the situation where the agreement needs to be updated.
[size=78%] [/size]

Tried that mod and it doesn't seem to work.  From looking at the developer's responses to issues with this mod, I think the problem perhaps relates to my use of the Chrome browser and its limited support for Java applets.  So, back to the drawing board...
Title: Re: Registration Agreement at First Login
Post by: Kindred on February 15, 2018, 08:15:15 PM
So, do what one of the sites I manage does....  use the. Forced topic mod and require users to post a response indicating agreeemenf...
Title: Re: Registration Agreement at First Login
Post by: galanb on February 17, 2018, 05:44:05 PM
Quote from: Kindred on February 15, 2018, 08:15:15 PM
So, do what one of the sites I manage does....  use the. Forced topic mod and require users to post a response indicating agreeemenf...


Thanks for your suggestion, Kindred.
I am running SMF 2.0.15, and I do not have any other mods installed but the mod you suggested trying.
I successfully installed this mod but I couldn't get it to work: it did not force any of the user Ids I tested with to the designated topic.  I tried changing to different topic numbers but it made no difference.  I cleared the browser cache, and tried a different browser: still no luck.
I read through all ten pages of Q&As on the mod, and the only thing that could be the underlying issue is that a number of posters (near the end of the thread) seemed to suggest it did not work if guest access to the forum was disabled.  I have guest access disabled in my forum.
Lastly, the install and setup instructions help dialog for the mod seems like it might be for an earlier version of SMF (1.x?) and not 2.x as it refers to setting the topic id in the Features and Options, Basic settings.  There are no Basic settings in Features and Options.  It looks like the topic setting (in SMF 2.x) is in Modifications Settings.  Not sure how to suggest this gets updated.
Title: Re: Registration Agreement at First Login
Post by: Kindred on February 17, 2018, 07:18:14 PM
Hmmmm... it works perfectly for us on fx-sabers.com/forum
We are running 2.0.15

However, issues and questions regarding the specific mod should be asked in the support thread for that mod.
Title: Re: Registration Agreement at First Login
Post by: confuseamuse on July 04, 2018, 12:23:07 PM
Is this still a topic of contention, even with the new GDPR rules?
Title: Re: Registration Agreement at First Login
Post by: Arantor on July 04, 2018, 01:38:42 PM
Not if you're using the GDPR mod, or the features coming in 2.0.16.