Page 1 of 1

E-Mail activation of Clients - much coding effort :-(

PostPosted: Sat Oct 25, 2014 16:14
by mike
Also the Unique ID is some kind of method to prevent griefers, there should be another method:

E-Mail verification.

To be able to connect to a server or to get a special priv you should have to provide you e-mail address (as in ircservices).

The easiest way to realize this is as follow: if you have not an authorized username with password you are considered as a new user. new users (users without passwords) need a token to connect.
If you connect to a new or passwordless username, you have to pass your email using the gameclient to the server.
The server sends an email to the provided address with a token.
The users has to enter this token to get access.

Anway some considerations are to be made:
- There should be some kind of captcha to prevent email flooding.
Also there should be a limit that only one email address can be entered per ip-address/day.
if the user mistypes he has to wait a day.
- There should be a blacklist system for antispam addresses
- The token should be locked per username and per ip for one day. so if this does not match the user is not able to connect.

Re: E-Mail activation of Clients - much coding effort :-(

PostPosted: Sat Oct 25, 2014 16:23
by Krock
Yes. I had that idea too some days ago.
Only one email per IP-address and day is a bad idea since there are networks with more than Minetest 1 player. (Families, schools, ..)

Why not just enter your email once at first Minetest startup and get the "token" there.

Re: E-Mail activation of Clients - much coding effort :-(

PostPosted: Sat Oct 25, 2014 16:25
by rubenwardy
This can be done using mods, and is done on some servers, for example Redcrab.

User types /email email@address.com and receives an email. Clicks link in email, or copies code into chat. Receives interact priv.

Re: E-Mail activation of Clients - much coding effort :-(

PostPosted: Sat Oct 25, 2014 16:29
by mike
is this mod available for public?

Re: E-Mail activation of Clients - much coding effort :-(

PostPosted: Sat Oct 25, 2014 16:29
by rubenwardy
Might be in here: viewtopic.php?id=7537

EDIT: no it isn't.