Topic-icon Admin notification emails sent to ALL users?

Active Subscriptions:

None
9 years 3 months ago - 9 years 3 months ago #61091 by rhh
Hi

I was debugging the Facebook connect an hour ago to see why it was timing out when a new user registered.
In the meanwhile, our Joomla sent out the "This site have a new user" email over 300 times this far (to regular users).

Tracking this down, I found that:
- When turning on "Notification Mail to Administrators" in Joomla's com_users, ALL users are getting this email whether they are administrator or not.

The site is using Joomla 3.6.5, Jfbconnect 7.1.2 and no other extensions.

This looks to be the same:
Invalid consumer key/secret in configuration
Last edit: 9 years 3 months ago by rhh.
The topic has been locked.
Support Specialist
9 years 3 months ago #61092 by mel
Could you confirm whether the registered users that are receiving the email have the 'Receive System Emails' option set in their user?

-Melissa
The topic has been locked.
Active Subscriptions:

None
9 years 3 months ago #61093 by rhh
As I see it, then yes.
The issue is a missing group/acl check on the administrators: i.imgur.com/KzpajKW.png
(frontend\models\loginregister.php)
The topic has been locked.
Support Specialist
9 years 3 months ago #61103 by alzander
You're correct that we could add the check for the group acl for creating users. Generally though, normal registered users shouldn't be subscribed to "system" emails. That's really only should be enabled for administrators and if you've enabled it for regular registered users it will likely cause issues in various extensions and places like above.

With that said, we are looking to add the proper check that the user is setup to receive the system emails and has the right permissions, but I still wouldn't recommend setting many people up with the system emails permission.

I hope that helps explain,
Alex
The topic has been locked.