E-Mail activation of Clients - much coding effort :-(
Also the Unique ID is some kind of method to prevent griefers, there should be another method:
E-Mail verification.
To be able to connect to a server or to get a special priv you should have to provide you e-mail address (as in ircservices).
The easiest way to realize this is as follow: if you have not an authorized username with password you are considered as a new user. new users (users without passwords) need a token to connect.
If you connect to a new or passwordless username, you have to pass your email using the gameclient to the server.
The server sends an email to the provided address with a token.
The users has to enter this token to get access.
Anway some considerations are to be made:
- There should be some kind of captcha to prevent email flooding.
Also there should be a limit that only one email address can be entered per ip-address/day.
if the user mistypes he has to wait a day.
- There should be a blacklist system for antispam addresses
- The token should be locked per username and per ip for one day. so if this does not match the user is not able to connect.
E-Mail verification.
To be able to connect to a server or to get a special priv you should have to provide you e-mail address (as in ircservices).
The easiest way to realize this is as follow: if you have not an authorized username with password you are considered as a new user. new users (users without passwords) need a token to connect.
If you connect to a new or passwordless username, you have to pass your email using the gameclient to the server.
The server sends an email to the provided address with a token.
The users has to enter this token to get access.
Anway some considerations are to be made:
- There should be some kind of captcha to prevent email flooding.
Also there should be a limit that only one email address can be entered per ip-address/day.
if the user mistypes he has to wait a day.
- There should be a blacklist system for antispam addresses
- The token should be locked per username and per ip for one day. so if this does not match the user is not able to connect.