I had PHPFox for the same project and dropped it to be replaced by JomSocial.

User registration had an enorumous amount of securities you could apply, things like:
1. User has to upload a profile picture.
2. User has to confirm email address.
3. User is pending approval by administrator.
4. reCaptcha with combination of numbers and letters.
5. Personalized pictures I could uppload and write a question the user would have to respond. (Things like I put the picture of a red airplane and the I ask: What is the main color of the airplane?)

Could you help me by creating a list of "all the things" I have to ativate to have the highest of the securities at user level registration?
Example:
1. Enable reCaptcha under menú.... (No need to tell how to enable reCaptcha)
2. Enable bla bla bla
3. Enable cla cla cla
4. And so on...

It's kind of a "Security Good Practices for User Registration Punch List".

Thanks for your help.

Best regards,

Juan Enrique

Hi, Juan Enrique.

1. The highest security setting for user during registration is to set two factor account activation: Backend -> Users -> User manager -> Options -> New User Account Activation -> Admin

Now users need to confirm their email and also administrator approves new members.

2. Enable Captcha in JomSocial: Backend -> Components -> JomSocial -> Configuration -> Site -> Registrations
Here you can also allow to register with emails within certain domain.

3. In the same place in Walls you can set that only Friends can do certain things on other user profiles.

4. Backend -> Components -> JomSocial -> Configuration -> Layout -> Frontpage Activity Stream -> Show Activity Stream set to NO (it will be hidden for guests).

5. Backend -> Components -> JomSocial -> Configuration -> Privacy -> default user privacy set all to Members

6. Create "Hidden menu" (a menu that is not displayed on site and not assigned to any module) and inside create menu items for each main pages of JomSocial as following: Profile, Friends, Photos, Videos, Groups, Events and set every item visible for "Registered".

This settings should assure high privacy for your community.