Also the Unique ID is some kind of method to prevent griefers, there should be another method:
E-Mail verification.
To be able to connect to a server or to get a special priv you should have to provide you e-mail address (as in ircservices).
The easiest way to realize this is as follow: if you have not an authorized username with password you are considered as a new user. new users (users without passwords) need a token to connect.
If you connect to a new or passwordless username, you have to pass your email using the gameclient to the server.
The server sends an email to the provided address with a token.
The users has to enter this token to get access.
Anway some considerations are to be made:
- There should be some kind of captcha to prevent email flooding.
Also there should be a limit that only one email address can be entered per ip-address/day.
if the user mistypes he has to wait a day.
- There should be a blacklist system for antispam addresses
- The token should be locked per username and per ip for one day. so if this does not match the user is not able to connect.
E-Mail activation of Clients - much coding effort :-(
- Krock
- Developer
- Posts: 4650
- Joined: Thu Oct 03, 2013 07:48
- GitHub: SmallJoker
- Location: Switzerland
- Contact:
Re: E-Mail activation of Clients - much coding effort :-(
Yes. I had that idea too some days ago.
Only one email per IP-address and day is a bad idea since there are networks with more than Minetest 1 player. (Families, schools, ..)
Why not just enter your email once at first Minetest startup and get the "token" there.
Only one email per IP-address and day is a bad idea since there are networks with more than Minetest 1 player. (Families, schools, ..)
Why not just enter your email once at first Minetest startup and get the "token" there.
Look, I programmed a bug for you. >> Mod Search Engine << - Mods by Krock - DuckDuckGo mod search bang: !mtmod <keyword here>
- rubenwardy
- Moderator
- Posts: 6978
- Joined: Tue Jun 12, 2012 18:11
- GitHub: rubenwardy
- IRC: rubenwardy
- In-game: rubenwardy
- Location: Bristol, United Kingdom
- Contact:
Re: E-Mail activation of Clients - much coding effort :-(
This can be done using mods, and is done on some servers, for example Redcrab.
User types /email email@address.com and receives an email. Clicks link in email, or copies code into chat. Receives interact priv.
User types /email email@address.com and receives an email. Clicks link in email, or copies code into chat. Receives interact priv.
Re: E-Mail activation of Clients - much coding effort :-(
is this mod available for public?
- rubenwardy
- Moderator
- Posts: 6978
- Joined: Tue Jun 12, 2012 18:11
- GitHub: rubenwardy
- IRC: rubenwardy
- In-game: rubenwardy
- Location: Bristol, United Kingdom
- Contact:
Who is online
Users browsing this forum: No registered users and 5 guests