patch to add QuestionRegisterPlugin-like functionality

[Dave Love]

I've had spam accounts created, despite using the AcctManager BotTrapCheck. (I wanted something like QuestionRegisterPlugin, but that no longer works.) I hacked up this change to the current AccountManager to ask a project-specific question (e.g. "What's the command to ..."), which should make the BotTrapCheck more robust when it's appropriate.

[Dave Love]

specify bot trap question

[Steffen Hoffmann]

Thanks for you contribution, and especially the explicit sign-off to this plugin's license.

[Steffen Hoffmann]

In 14245:

AccountManagerPlugin: Allow a question as alternative BotTrapCheck field description, refs #10270 and #12054.

This makes BotTrapCheck field description configurable. Now you can require
user input other than exact duplication of text from the description.
That should be more effective against SPAM registration attempts, similar
to QuestionRegisterPlugin functionality - effectively obsoleting that hack.

Thanks to Dave Love for this contribution; just PEP8 aligned here.

Caveat: Neither Trac core nor the plugin itself allows translations of custom
descriptions yet.

[Steffen Hoffmann]

Consequently QuestionRegisterPlugin has been marked as deprecated now.

[Steffen Hoffmann]

registration form with example for custom BotTracCheck description text

[Steffen Hoffmann]

option documentation as available in configuration admin section for acct_mgr-0.5

[Steffen Hoffmann]

Better luck with SPAM fighting to all of us.

[Dirk Stöcker]

With the above question you have probably a 80% chance to also reject any valid user.

And are you sure the question is right. Nobody knows it :-)

[Steffen Hoffmann]

Hm, I bet, the majority of trac admins will not copy this example but take it for what it was meant: An example question you shouldn't use. Or: Better find an individual question yourself. But maybe I'm assuming too much.? ;-)

[Ryan J Ollos]

Replying to hasienda:

Hm, I bet, the majority of trac admins will not copy this example but take it for what it was meant: An example question you shouldn't use.

Yeah I took it for just a joke. Either way, if the admin hears many complaints to a poor question I'm sure they will change the question.

[Ryan J Ollos]

One small thing regarding the configuration wizard. Looking at [14245] I can see that I should leave reg_basic_question blank if I want the standard prompt, but that's not obvious in the configuration wizard. Maybe it would be useful to have a Specify custom question checkbox that enables the reg_basic_question field when selected.

[Steffen Hoffmann]

Replying to rjollos:

One small thing regarding the configuration wizard. Looking at [14245] I can see that I should leave reg_basic_question blank if I want the standard prompt, but that's not obvious in the configuration wizard. Maybe it would be useful to have a Specify custom question checkbox that enables the reg_basic_question field when selected.

It smells like option overkill and I'd rather extend options description to make it clear.

[Steffen Hoffmann]

In 14275:

AccountManagerPlugin: Clarify embedded option description, refs #12054.

This change acknowledges a comment regarding possible uncertainty caused
by [14245] and tries to improve the related option description.