E-Mail activation of Clients - much coding effort :-(

mike
Member
 
Posts: 45
Joined: Wed Sep 26, 2012 01:15

E-Mail activation of Clients - much coding effort :-(

by mike » Sat Oct 25, 2014 16:14

Also the Unique ID is some kind of method to prevent griefers, there should be another method:

E-Mail verification.

To be able to connect to a server or to get a special priv you should have to provide you e-mail address (as in ircservices).

The easiest way to realize this is as follow: if you have not an authorized username with password you are considered as a new user. new users (users without passwords) need a token to connect.
If you connect to a new or passwordless username, you have to pass your email using the gameclient to the server.
The server sends an email to the provided address with a token.
The users has to enter this token to get access.

Anway some considerations are to be made:
- There should be some kind of captcha to prevent email flooding.
Also there should be a limit that only one email address can be entered per ip-address/day.
if the user mistypes he has to wait a day.
- There should be a blacklist system for antispam addresses
- The token should be locked per username and per ip for one day. so if this does not match the user is not able to connect.
 

User avatar
Krock
Member
 
Posts: 3598
Joined: Thu Oct 03, 2013 07:48
GitHub: SmallJoker

Re: E-Mail activation of Clients - much coding effort :-(

by Krock » Sat Oct 25, 2014 16:23

Yes. I had that idea too some days ago.
Only one email per IP-address and day is a bad idea since there are networks with more than Minetest 1 player. (Families, schools, ..)

Why not just enter your email once at first Minetest startup and get the "token" there.
Newest Win32 builds - Find a mod - All my mods
ALL YOUR DONATION ARE BELONG TO PARAMAT (Please support him and Minetest)
New DuckDuckGo !bang: !mtmod <keyword here>
 

User avatar
rubenwardy
Member
 
Posts: 4500
Joined: Tue Jun 12, 2012 18:11
GitHub: rubenwardy
IRC: rubenwardy
In-game: rubenwardy

Re: E-Mail activation of Clients - much coding effort :-(

by rubenwardy » Sat Oct 25, 2014 16:25

This can be done using mods, and is done on some servers, for example Redcrab.

User types /email email@address.com and receives an email. Clicks link in email, or copies code into chat. Receives interact priv.
 

mike
Member
 
Posts: 45
Joined: Wed Sep 26, 2012 01:15

Re: E-Mail activation of Clients - much coding effort :-(

by mike » Sat Oct 25, 2014 16:29

is this mod available for public?
 

User avatar
rubenwardy
Member
 
Posts: 4500
Joined: Tue Jun 12, 2012 18:11
GitHub: rubenwardy
IRC: rubenwardy
In-game: rubenwardy

Re: E-Mail activation of Clients - much coding effort :-(

by rubenwardy » Sat Oct 25, 2014 16:29

Might be in here: viewtopic.php?id=7537

EDIT: no it isn't.
 


Return to Minetest Features

Who is online

Users browsing this forum: No registered users and 7 guests

cron