TL;DR
XMod Pro 4.9.2: Resolves an issue on DNN 9.3.2 and later where the <AddUser> tag would not send verification emails to new users on sites whose registration mode was set to Verify.
DETAILS:
Yesterday we were notified of an issue in DNN. As you are probably aware, registration in DNN can be set to Private, Verified, Public, or None. When a user registers, an email is sent to the user. Its content changes based on the registration mode. For instance, if a site is set to Verified, then the email will contain a link with a verification token so the user can verify their email address.
These different message types are reflected by a set of values (Enums for the programmers among you). Typically these values should never change because they are used by DNN and modules to make code more readable and ensure the apps run consistently.
Sometime around DNN 9.3.2 these values changed. The way they were originally initialized made it possible for this to happen and an inadvertent code insertion resulted in those values being modified.
As a result, applications which rely on these values exhibited unexpected results. XMod Pro (XMP) uses these values when you use the <AddUser> tag in forms to register a new user. Because of the change in values, when XMP thought it was instructing DNN to send a Verification Email to a new user, DNN sent out an email it normally sends for Public registration sites.
To be clear, this only applies to the type of message sent, it does not affect the actual user registration and does not impact security in any way. However, users on verified sites may not have been able to verify their email addresses because they were not sent the link.
This only applies to sites that run DNN 9.3.2 and later and have an XMod Pro form that uses the <AddUser> tag to register new users. We highly recommend these sites upgrade to XMP v.4.9.2 as soon as possible.
We have accommodated the issue in a backwards-compatible way, so if you are running DNN 9.2+ and are planning to upgrade to a later version, we recommend using v.4.9.2 as well.
If you are running a version earlier than DNN 9.2, you do not need to upgrade.
BEFORE UPGRADING: Ensure that your license is still active as of January 18, 2021 before installing. Otherwise the software will not function.
The upgrade is available now in our Client Downloads section.