Email verification

PHP programming forum. Ask questions or help people concerning PHP code. Don't understand a function? Need help implementing a class? Don't understand a class? Here is where to ask. Remember to do your homework!

Moderator: General Moderators

Post Reply
hame22
Forum Contributor
Posts: 214
Joined: Wed May 11, 2005 5:50 am

Email verification

Post by hame22 »

Hi I have a website that offers a free set of download credits each time a new user registers.

I have set it so that only one account can be opened per email address, however I still find that I am getting users opening mulitple accounts through made up email addresses.

I have found scripts that can verify a domain of an email but this does not prove that this address is real.

Is there a good way to check whether an email address is real and is owned by the user??

I noticed verification emails, how does this process work and does it keep the registration process quick and smooth?

thank you in advance
User avatar
JayBird
Admin
Posts: 4524
Joined: Wed Aug 13, 2003 7:02 am
Location: York, UK
Contact:

Post by JayBird »

Simpe enough process

1) User signs up for an account
2) A unique idetifier is generated for this user
3) Send an email to said user, with a unique link (using the identifier) that the user has to click on to verify their email address
4) This then activates their account

Obviously, they can only activate their account if they actually own that email address

job done
User avatar
R4000
Forum Contributor
Posts: 168
Joined: Wed Mar 08, 2006 12:50 pm
Location: Cambridge, United Kingdom

Post by R4000 »

may i also add to this, that you should have the user input his password while verifying, then you dont get some of the issue with some users ive had, a few months ago there was a service that allowed you to put your email in websites as ANYTHING@thedomain.com, and they would pick it up, and visit any links in the email.

Also i recommed you block mailinator.com from your signups cause that is practicly the same, but you click the link yourself.
And maybe have IP checking, if two or three accounts have same IP, they get added to Multiple IP List... and you can check it out for youself.

Just my 4 and a half cents.
Post Reply