What would be the best practice for this usecase without messing user registration and keep users unique ?Īm I just taking the wrong path for this kind of validation ?Įdit: an example of this kind of abuse would be a website with torrents files where you have to maintain a ratio of 1. On the other hand, there might be a lot of other mail provider using the same strategy, and filtering by providers seems kind of clumsy. It clearly seems to be the easier road to prevent abusive users to abuse my system. I am aware that I could check for a gmail address and then removes dot(s), so this would not work. So far so good, however an user with could create a lots of account ( 8192 according to )
when the user click the link (assuming it is still valid) he can now login and perform actions.a mail is sent to the user with a link allowing him to validate his account (the link is only available for a couple of hours).a line is inserted in database for this user (the user can't login because he did not verify his mail).So when an user register, the following process is done : And I really want my users to be unique (at least for my database IDs). Thanks for reading hope you like this article feel free to leave comments.Disclaimer : temporary mails providers are out of the scope of this question.
Instead of using Gmail account with actual username and password it is possible to login like thisĪll of these will map to same Gmail account even its possible to compose a mail with dot and receiver can able to receive it but some advertisers and GPTs(Get-To-Pay)sites are banning this trick and also its not working for other email services like Yahoo,AMI,Inbox. Here all we need is a Gmail account with long username so that combinations can generated more. ) but its not a trick to hack the gmail account. We know Gmail is a free email service offered by Google, This Gmail Dot Trick is a cool Bug deals with username and a Dot (.
0 kommentar(er)
