<disable_account_creation>1</disable_account_creation>This disables account creation via any mechanism (the client, the web, or account managers). You can momentarily remove this element while you create accounts.
It is also possible to restrict account creation to only those who present a secret 'invitation code'. In this case an account can only be created via the web pages, not via the client or an account manager.
To use this mechanism you need to add to the file html/project/project.inc a definition for a PHP pre-processor symbol INVITE_CODES containing the allowed invitation codes. A simple example is:
define('INVITE_CODES', '/xyzzy/');
This allows account creation only if the user enters the invitation code
'xyzzy' (without any quotes).
The pattern in INVITE_CODES is compared to the user's input as a
Perl-Compatible Regular Expression (PCRE),
so don't forget the enclosing slashes.
A more complicated example is:
define('INVITE_CODES', '/yohoho|blunderbuss|!grog4U/');
In a PCRE vertical bars separate alternatives,
so this pattern just allows someone to create an account
if they enter any of the words 'yohoho', 'blunderbuss', or '!grog4U'.
More complex pattern matching is possible, though not required.
The security of this mechanism depends on how you distribute the invitation codes. If you write the code on the whiteboard in your lab then only someone with access to that room can use it. If you send it out to a mailing list then only members of that list can use it (until someone shares it with someone else who is not on the list). The goal here is not strict security so much as a way for a new project to limit account creation to a restricted set of users while the project is getting started. "; page_tail(); ?>