Flag suspicious registrations sharing risky account IPs #974

Merged

jimmyb merged 1 commit from codex/issue-49-suspicious-registration-alerts into master

2026-10-15 09:28:39 -05:00

Codex commented

2026-10-15 08:54:00 -05:00

Member

Flag registrations whose IP matches a banned/deleted account or at least two existing accounts created within seven days, while keeping ordinary IP reuse quiet.

Persist structured security audit snapshots and send optional queued Discord embeds with account edit links, Central-time dates, bounded retries, and resumable pagination. Configure DISCORD_WEBHOOK_URL and an asynchronous queue worker to enable delivery; the migration adds a registration-IP lookup index.

Verification: 48 focused tests passed, including registration regressions, risk flags, burst boundaries, IPv6, transaction rollback, delivery failures, embed limits, index rollback, and audit retention. The opt-in live delivery test was skipped in the final automated run; separate live mock deliveries were accepted by Discord. Pint and PHPStan passed.

Fixes #49

Flag registrations whose IP matches a banned/deleted account or at least two existing accounts created within seven days, while keeping ordinary IP reuse quiet. Persist structured security audit snapshots and send optional queued Discord embeds with account edit links, Central-time dates, bounded retries, and resumable pagination. Configure `DISCORD_WEBHOOK_URL` and an asynchronous queue worker to enable delivery; the migration adds a registration-IP lookup index. Verification: 48 focused tests passed, including registration regressions, risk flags, burst boundaries, IPv6, transaction rollback, delivery failures, embed limits, index rollback, and audit retention. The opt-in live delivery test was skipped in the final automated run; separate live mock deliveries were accepted by Discord. Pint and PHPStan passed. Fixes #49

Rows
Columns