Main Content

Why do we delay new forum members through authorisation?

Archive - Originally posted on "The Horse's Mouth" - 2009-04-03 04:53:48 - Graham Ellis

It's a big step for many people to sign up to a forum; perhaps they have been visiting as a guest for weeks or months, and something they have read has triggered them to take the final step and say "I want to contribute" and sign up. Signing up to the forums that I administer is free, but it's still a big step for people - so why do we then, seemingly, make it harder that it needs to be?

In a nutshell, we want to maintain the quality of the forum - to ensure that members who are signed up are there because they are real people, wanting to read about / talk about the subjects that the forums covers. And there's also the legal issue that we need to have at some comeback to the poster if what is posted breaks boundaries such as copyright, incitement, impersonation or decency ... quite apart from our own guidelines, where we want to ensure that we don't get signups from the same person for lots of accounts, or people being members so that they can attempt to sell things to our members through the p.m. system, or as trolls.

At first signup, people are asked for an email address and we validate that. On most of our forums, they are also asked to retype a word that's shown in a graphic and does not appear in the HTML source at all - that's to help weed out automated programs. See here for a brief intro to the techniques involved, and here to see it in use (with an easy graphic that a sophisticated cracking program possibly could get past, it has to be said) to see it in use. But that doesn't trap the real, human applicant with a different agenda to ours.

So as as second step, the information gathered at signup is passed through to one of our administrators, who takes a look at the data manually. Some of the accounts requested are blazingly obvious to authorise - the account with the email address that's already known to us, for example (if someone has falsified an email address, then our known contact will get an unexpected email and the issue is flagged without the perpetrator getting access). Other requests are very clearly false ones, for example user names that include a pharmaceutical product name with the "I" changed to a "1". But there's a proportion that fall in the middle that need further investigation.

Perhaps I should stop writing at this point. ;-) . Perhaps I am just about to give you the inside information that tells you what I look for in a signup request that convinces me "genuine" or "false", or leads me to authorise but keep a watching brief. So let's just say that there are a number of tools around, a number of pieces of information. And there are some very good people I can ask for their thoughts / opinions / research who act as moderators on some of the boards I administer. In those cases which are a really close call, a friendly email asking a little more, rather than giving authorisation straight away, adds a further loop to the cycle but results in very clear extra data which makes a decision blindingly obvious.

Forums that we run / will be running / ran:
First Great Western Coffee Shop Unofficial First Great Western Passenger discussions
Ask the Tutor For course delegate and others to ask Open Source and technical questions
Save The Train Swindon - Salisbury railway line - campaign for decent service (heavy spam signups - please email graham@wellho.net too if you sign up!)
Melksham Chamber of Commerce (not yet publicised / launched)
Opentalk - our previous forum for delegates, now archived and closed to new signups.