Bogus accounts in patchwork

[Carl Worth]

Carl-Daniel Hailfinger <c-d.hailfinger.devel.2006 at gmx.net> writes:
> we're seeing the same at the patchwork instance at coreboot.org.

We've got this problem at freedesktop.org as well.

When I looked into the issue, it appeared that bots were requesting
accounts, and then obviously not replying to the challenge emails, but
this was creating new rows in the database that were never getting
cleaned up.

These would be pretty easy to cleanup if the patchwork interface allowed
for filtering on how much time has passed since the inactive accounts
were created.

Even better would be if these were just automatically purged as soon as
the challenge expires. (We had a related problem where a real user let
the email challenge expire, and then couldn't re-create a new account
until an admin deleted the old one.)

-Carl
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 818 bytes
Desc: not available
URL: <http://lists.ozlabs.org/pipermail/patchwork/attachments/20140417/7e6014cf/attachment.sig>