Difference between revisions of "Dealing with a problem user"

From Joomla! Documentation

m
 
(12 intermediate revisions by 7 users not shown)
Line 1: Line 1:
{{review}}[[Category:FAQ]][[Category:Version 1.5 FAQ]][[Category:Getting Started FAQ]]
+
[[Category: Tips and tricks]][[Category: Tips and tricks 1.5]]
  
The best method of dealing with a problem user is ''not'' to delete the account.  It is better to simply block them from logging in.  This is true for a few different reasons.
+
The best method of dealing with a problem user is ''not'' to delete the account.  It is better to simply block them from logging in.  This is true for a few different reasons:
  
First, it is temporary, so it can be used to suspend rather than ban. Second, if you are requiring your users to authenticate via email and you are not allowing duplicate email addresses, it will make it slightly more difficult for them to simply recreate their account or create a new account.   
+
* First, it is temporary, so it can be used to suspend rather than ban.
 +
* Second, if you are requiring your users to authenticate via email and you are not allowing duplicate email addresses, it will make it slightly more difficult for them to simply recreate their account or create a new account.   
  
 
== Blocking Access ==
 
== Blocking Access ==
  
# From the ''Main Administrator Screen'' (http://www.yoursite.com/administrator), click '''User Manager'''. <br>[[Image:User-Manager.png]]
+
# From the ''Main Administrator Screen'' (http://www.example.com/administrator), click '''User Manager'''. <br>[[Image:User-Manager.png]]
# Locate the problem user.  The easiest way to do this if you have a large number of users is to type part of their name, user name, or email address in the search box and click '''Go'''. <br>[[Image:Search-Box.png]]
+
# Locate the problem user using the filter.  The easiest way to do this if you have a large number of users is to type part of their name, user name, or email address in the search box and click '''Go'''. <br>[[Image:Search-Box.png]]
 
# Select the user by '''placing a checkmark next to their name'''.<br>[[Image:Select-User.png]]
 
# Select the user by '''placing a checkmark next to their name'''.<br>[[Image:Select-User.png]]
 
# At the top right of the screen, click '''Edit'''.<br>[[Image:Click-Edit.png]]
 
# At the top right of the screen, click '''Edit'''.<br>[[Image:Click-Edit.png]]
# On the lefthand side of the screen, towards the bottom, select the '''Yes''' radio button under '''Block User'''.<br>[[Image:Block-User.png]]
+
# On the lefthand side of the screen, towards the bottom, select the '''Yes''' radio button next to '''Block User'''.<br>[[Image:Block-User.png]]
 
# At the top right of the screen, click '''Save'''.<br>[[Image:Click-Save.png]]
 
# At the top right of the screen, click '''Save'''.<br>[[Image:Click-Save.png]]
# Visually verify the user is blocked by looking for both the ''Sucessfuly saved User'' message at the top of the screen, as well as the icon with the white X in a red circle under the '''Enabled''' column.<br>[[Image:Verify-Disabled.png]]
+
# Visually verify the user is blocked by looking for both the ''Successfully saved User'' message at the top of the screen, as well as the icon with the white X in a red circle under the '''Enabled''' column.<br>[[Image:Verify-Disabled.png]]
  
== Additional Blocking Methods ==
+
== Blocking By IP Address ==
  
In addition to this simple blocking method, there are [http://extensions.joomla.org extensions] which will allow for more advanced blocking methods such as blocking by IP address.  There may also be methods for blocking access at the web server level, depending upon your web hosting serviceThese are, however, beyond the scope of this article.
+
While there are some [http://extensions.joomla.org extensions] that will allow for blocking by IP address, Joomla! does not include this functionality by defaultAdditionally, please note that as discussed in the [http://docs.joomla.org/Security_and_Performance_FAQs Security and Performance FAQs,] this method is ''not'' recommended because it is less effective for the following reasons: 
 +
* First, because the problem user may not actually be the owner of the IP address.
 +
* Second, because most IP addresses are non-static, so they will change periodicallyFor example, if the person is using a wireless laptop, and simply moves to a different wireless router, they will end up with a new IP address.
  
== Legal Action ==
+
[[Category:Tutorials]][[Category:User Management]]
 
 
Depending upon your location and the nature of the activities of the problem user, there may be certain legal actions which are entitled, or even ''required'' to take.  If you feel this may be the case, please consult an attorney or the appropriate authorities in your area.
 

Latest revision as of 00:09, 30 May 2014


The best method of dealing with a problem user is not to delete the account. It is better to simply block them from logging in. This is true for a few different reasons:

  • First, it is temporary, so it can be used to suspend rather than ban.
  • Second, if you are requiring your users to authenticate via email and you are not allowing duplicate email addresses, it will make it slightly more difficult for them to simply recreate their account or create a new account.

Blocking Access[edit]

  1. From the Main Administrator Screen (http://www.example.com/administrator), click User Manager.
    User-Manager.png
  2. Locate the problem user using the filter. The easiest way to do this if you have a large number of users is to type part of their name, user name, or email address in the search box and click Go.
    Search-Box.png
  3. Select the user by placing a checkmark next to their name.
    Select-User.png
  4. At the top right of the screen, click Edit.
    Click-Edit.png
  5. On the lefthand side of the screen, towards the bottom, select the Yes radio button next to Block User.
    Block-User.png
  6. At the top right of the screen, click Save.
    Click-Save.png
  7. Visually verify the user is blocked by looking for both the Successfully saved User message at the top of the screen, as well as the icon with the white X in a red circle under the Enabled column.
    Verify-Disabled.png

Blocking By IP Address[edit]

While there are some extensions that will allow for blocking by IP address, Joomla! does not include this functionality by default. Additionally, please note that as discussed in the Security and Performance FAQs, this method is not recommended because it is less effective for the following reasons:

  • First, because the problem user may not actually be the owner of the IP address.
  • Second, because most IP addresses are non-static, so they will change periodically. For example, if the person is using a wireless laptop, and simply moves to a different wireless router, they will end up with a new IP address.