[issue] Spam accounts gets created trough local account (no way?!)

[0n1cOn3]

Description

Spammers found a way to register an account without using the given Login Providers (as you can see from the screenshot below)

Gitea Version

1.22.0

Can you reproduce the bug on the Gitea demo site?

No

Log Gist

No response

Screenshots

Git Version

2.34.1

Operating System

Ubuntu 20.04 LTS

How are you running Gitea?

Docker-Compose V2

Database

MySQL/MariaDB

[lunny]

You can enable captcha and other methods to avoid spammers. If you want to disable local user, it's duplicated of #13606

[0n1cOn3]

Thank you ! 🥇

[0n1cOn3]

I have saddly to say, that Captcha is already enabled.
And the given thread from you is also saddly not really helpful to get that issue fixed :-(

[jiriks74]

I have saddly to say, that Captcha is already enabled.

I've enabled reCAPTCHA and verified that it appears on the registration website. Sadly it does nothing to stop the account spam I've been battling over the last few days.

[HashDot]

I have had this problem for several weeks. I see 2 options for a quick but only temporary solution. You can disable the user registration completely and only invite users or you can set an e-mail restriction. But this does not help if you run a “public” instance. But for the Homelab this should solve the problems for now.

[lunny]

Disabling local user have been implemented in #32687 and will be released in v1.23.