E-Mail activation of Clients - much coding effort :-(

Post Reply
mike
Member
Posts: 46
Joined: Wed Sep 26, 2012 01:15

E-Mail activation of Clients - much coding effort :-(

by mike » Post

Also the Unique ID is some kind of method to prevent griefers, there should be another method:

E-Mail verification.

To be able to connect to a server or to get a special priv you should have to provide you e-mail address (as in ircservices).

The easiest way to realize this is as follow: if you have not an authorized username with password you are considered as a new user. new users (users without passwords) need a token to connect.
If you connect to a new or passwordless username, you have to pass your email using the gameclient to the server.
The server sends an email to the provided address with a token.
The users has to enter this token to get access.

Anway some considerations are to be made:
- There should be some kind of captcha to prevent email flooding.
Also there should be a limit that only one email address can be entered per ip-address/day.
if the user mistypes he has to wait a day.
- There should be a blacklist system for antispam addresses
- The token should be locked per username and per ip for one day. so if this does not match the user is not able to connect.

User avatar
Krock
Developer
Posts: 4650
Joined: Thu Oct 03, 2013 07:48
GitHub: SmallJoker
Location: Switzerland
Contact:

Re: E-Mail activation of Clients - much coding effort :-(

by Krock » Post

Yes. I had that idea too some days ago.
Only one email per IP-address and day is a bad idea since there are networks with more than Minetest 1 player. (Families, schools, ..)

Why not just enter your email once at first Minetest startup and get the "token" there.
Look, I programmed a bug for you. >> Mod Search Engine << - Mods by Krock - DuckDuckGo mod search bang: !mtmod <keyword here>

User avatar
rubenwardy
Moderator
Posts: 6978
Joined: Tue Jun 12, 2012 18:11
GitHub: rubenwardy
IRC: rubenwardy
In-game: rubenwardy
Location: Bristol, United Kingdom
Contact:

Re: E-Mail activation of Clients - much coding effort :-(

by rubenwardy » Post

This can be done using mods, and is done on some servers, for example Redcrab.

User types /email email@address.com and receives an email. Clicks link in email, or copies code into chat. Receives interact priv.
Renewed Tab (my browser add-on) | Donate | Mods | Minetest Modding Book

Hello profile reader

mike
Member
Posts: 46
Joined: Wed Sep 26, 2012 01:15

Re: E-Mail activation of Clients - much coding effort :-(

by mike » Post

is this mod available for public?

User avatar
rubenwardy
Moderator
Posts: 6978
Joined: Tue Jun 12, 2012 18:11
GitHub: rubenwardy
IRC: rubenwardy
In-game: rubenwardy
Location: Bristol, United Kingdom
Contact:

Re: E-Mail activation of Clients - much coding effort :-(

by rubenwardy » Post

Might be in here: viewtopic.php?id=7537

EDIT: no it isn't.
Renewed Tab (my browser add-on) | Donate | Mods | Minetest Modding Book

Hello profile reader

Post Reply

Who is online

Users browsing this forum: No registered users and 5 guests