This is about e mail confirmation after a user got registered. The user in question did not confirm his e mail address as requested by the site but was able to log in each time. This is the only user that was able to violate this rule. What do you think is responsible for this? He has been a member for more than three months, refused to confirm e mail and he logged in daily. Is he a bot or what?
Obiri, this is not possible to enter the website if you have not confirm your e-mail. You can test it on your own. create a profile each time you will try to enter the website with your access details you'll get a confirm e-mail page.
I like how oxwall team just assumes their product is unbreakable apparently Obiri has seen that someone can go around site security and oxwall team replies "this is not possible" instead of saying "this should not happen may we have a look?"