Extension:ConfirmAccount

The ConfirmAccount extension disables direct account creation and requires submission and approval of accounts by bureaucrats. Account creations can be enabled through configuring user rights, such as if you wanted Sysops/Bureaucrats to be able to directly make them.

If installed with the ConfirmEdit extension, captchas can be used to stop flood requests.

The new user log extension also works with ConfirmAccount.

Setup

 * Download the extension from SVN
 * Run the ConfirmAccount.sql query, substituting in your wiki's table prefix.

Add the  line to LocalSettings.php.

Use

 * 1) As a bureaucrat (or other user with the confirmaccount permission), browse to Special:ConfirmAccounts
 * 2) Click approve/reject
 * 3) You will see the whole form with the users' data. Carefully review the form, and proceed to creating the account or rejecting the request.
 * 4) If you chose to create the account, the user's biography will become their userpage and the userpage will be automaticaly created with the default summary of Creating user page with biography of new user.

Issues

 * Name collisions: account creations will be checked and stopped if it collides with a pending name. Requests are checked for pending/account name collisions too.
 * AuthPlugin stuff. If a central login is used, perhaps the database for that can be configured so that all requests go to one table. Otherwise, when accounts are confirmed and made, we may get name collisions.
 * Passwords, hashes may be salted with ids, which request accounts don't yet have. Likely it will have to be emailed to the user. Sites that don't use system emailing will not be able to use this extension likely.