开发者

Web service to check existence of email?

I have my little web application, with simple registratio开发者_C百科n strategy - provide email and password and you are done.

Recently bot's starting to attack my application, registering big number of users from non existent emails using the same passwords.

I want to prevent that. My idea is to extend login verification, but check the existance of email address. Do you know any web services (prefereably WCF) that could do that?


This is definitely not the way to solve this problem. Try one of these

  1. Allow user to enter only username and send auto-generated password to their email.
  2. Send a verification link to the user email and approve him/her only after verification


This has been discussed on How to check if an email address exists without sending an email? . Basically there are ways verify email addresses, but in practice none of them is reliable. However, you can still check via SMTP, and if the server denies the existence of the expected user, send him an email with a verification link anyway. This does not prevent spammers from setting up fake servers that acknowledge the existence of any user, of using other peoples email addresses, but it's probably the closest you can get to your initial requirement of having no verification email.


I would recommend you to update your registration form. Try to use something tricky for bots. For example, post the form via AJAX with JSON object wrapper.


Try a service like: http://elasticemail.com/

You can use the api to check if the email was delivered. There is also a 'bouce list' you can check.

0

上一篇:

下一篇:

精彩评论

暂无评论...
验证码 换一张
取 消

最新问答

问答排行榜