[SOLVED] How To Prevent Stealth Registrations

Joomla: 3.8.5
Community Builder: 2.1.3

Hi all, I've recently noticed a few spam registrations sneaking onto my site somehow.

I have Joomla Registration turned off in the User Options, and CB is set to Yes, Independent of CMS "allow registration".

Even though there's a front-facing login box, there's no front-facing registration form (or there shouldn't be). We collect login info from potential clients, and then when ready we register them manually. No end user should be able to register themselves.

Any idea how they're doing this? And what kind of measures should I be taking to prevent these registrations?

You have CB registration turned on so all they need is the URL to CBs registration form and they can register. Set CBs registration to "Same as CMS "allow registration"" and leave Joomlas turned off. That'll disable frontend registration entirely.

Alright thanks much, I've now done that.