What is a minimal email verification element count?
CodeGuru Home VC++ / MFC / C++ .NET / C# Visual Basic VB Forums Developer.com
Results 1 to 4 of 4

Thread: What is a minimal email verification element count?

  1. #1
    Join Date
    Dec 2014
    Posts
    3

    What is a minimal email verification element count?

    This is not a programming question.

    Rather, security.

    When I take in the user's information, email, username, account, I also take in their IP address and current time which outputs a 10 digit integer. So my thought was to send them the email with a link with a new .php file and this file collects their IP address again, as well as the current time, I would specify an "elapsed-time" constraint to be checked... but I'm thinking this is not good enough... I may be clearly missing something.

    I thought further that I could use a question like the one I answered when I registered for this forum but I think that question may be randomly generated eg. not always the same one. So I'm not sure how I can validate a person being real...

    Any thoughts?

  2. #2
    Join Date
    Dec 2014
    Posts
    3

    Re: What is a minimal email verification element count?

    How about if I asked "What are the last three characters of your email account before the @ symbol" ?

    I think that a "hacker" could try and attempt random possibilities eg, a,ab,abc,abcd, and then eventually match those somewhat "random" strings especially since the email account was stored.

    I stored the email in case of a password reset

  3. #3
    Join Date
    Dec 2014
    Posts
    3

    Re: What is a minimal email verification element count?

    I'm actually going to use a smtp-email-validation from google which I'm still not sure if that is enough

  4. #4
    Arjay's Avatar
    Arjay is offline Moderator / MS MVP Power Poster
    Join Date
    Aug 2004
    Posts
    11,769

    Re: What is a minimal email verification element count?

    Quote Originally Posted by greenace92 View Post
    I'm actually going to use a smtp-email-validation from google which I'm still not sure if that is enough
    Please define, "still not sure if that is enough". What are you hoping to accomplish? If the email address is a valid address? If so, what problems do you see using google's smtp-email-validation?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  


Windows Mobile Development Center


Click Here to Expand Forum to Full Width

This is a Codeguru.com survey!


HTML5 Development Center