Add way to delete spam/unused users

[rubenwardy]

Describe the problem

My weblate instance has been targeted by a large number of spammy sign ups. Automated bots create accounts to link to their websites. Due to rel=ugc, this won't actually help their SEO. But it may be resulting in my website being seen as less trustworthy (I've been banned from Bing recently for some unknown reason), and having a large number of fake users is annoying

Describe the solution you'd like

There should be a way to delete spam/unused users. The criteria could be not a member of a project, never contributed to the project, and not used their account within a set period of recency

Describe alternatives you've considered

It would also be good to have better checks to prevent spammy sign ups.

Or perhaps a way to disable user profiles completely

Screenshots

No response

Additional context

My instance is at https://weblate.rubenwardy.com/

[rubenwardy]

I've found REGISTRATION_CAPTCHA, this should definitely be enabled by default or highlighted in tutorials.

I've done UPDATE accounts_profile SET codesite='', website=''; to remove the URLs

[nijel]

REGISTRATION_CAPTCHA is enabled by default:

https://github.com/WeblateOrg/weblate/blob/d60ef3b7a551a6812a58bc76f346b51c887bc9f7/weblate/accounts/models.py#L77-L78

[github-actions[bot]]

This issue has been automatically marked as stale because there wasn’t any recent activity.

It will be closed soon if no further action occurs.

Thank you for your contributions!

[rubenwardy]

"A computer can never be held accountable, therefore a computer must never make a management decision"

[comradekingu]

What accountability you have isn't helped by turning that off…? You could add your instance to https://weblate.org/discover/ to help its discoverability :)

[github-actions[bot]]

This issue has been put aside. It is currently unclear if it will ever be implemented as it seems to cover too narrow of a use case or doesn't seem to fit into Weblate.

Please try to clarify the use case or consider proposing something more generic to make it useful to more users.

[rubenwardy]

What accountability you have isn't helped by turning that off…? You could add your instance to weblate.org/discover to help its discoverability :)

I was commenting on the stale issue bot

I have REGISTRATION_CAPTCHA enabled but it doesn't seem to be that effective. My instance has 1370 registered users, but only a few of those are legitimate

[nijel]

The captcha implementation is pretty basic right now, see also https://github.com/WeblateOrg/weblate/issues/1462.