GitLab

Recently a lot of user accounts seem to be created by bots. With #712 (closed) this should be stopped for the moment.

To remove these accounts, I suggest adding a daily task, which removes user accounts that match all of the following criteria:

• account is older than 30 days
• never logged in or time span between account creation and last login is less than 5 seconds
• email address is not verified
• no memberships, no subscriptions
• no content (versions)
• no comments or messages
• no images, no poll votes

The following fragment and the account deletion code can help with implementation:

for user in User.objects.filter(emailaddress__verified=False):
    if not user.last_login or ((user.last_login - user.date_joined) < timedelta(seconds=5)):
        // check memberships, content etc.