Multiple Registrations with Same Email

[pparage]

Bug Report: Multiple Registrations with Same Email

Describe the bug
Users are able to register multiple accounts using the same email address. The system should prevent duplicate email registrations, but currently allows them.

To Reproduce
Steps to reproduce the behavior:

1. Go to the registration page
2. Register a new account with email "test@example.com"
3. Log out
4. Go to the registration page again
5. Register another account using the same email "test@example.com"
6. The system accepts the registration when it should reject it with a duplicate email error

Expected behavior
The system should detect that the email is already registered and display an error message preventing the second registration. Users should be directed to the password recovery option if they've forgotten their password.

Additional context
This issue represents a security risk as it:

• Creates confusion about which account is valid
• May allow bypassing of account controls
• Could create orphaned data in the system
• Breaks the assumption that email addresses uniquely identify users

[pparage]

Potential fix:
in forms.py add:

def clean_email(self):
        email = self.cleaned_data.get("email")
        if User.objects.filter(email=email).exists():
            raise ValidationError("This email is already registered. Please use a different email or recover your password.")
        return email