One thing to consider is what happens on the server end when a lot of requests come in? Do you create a session entry in your database or filesystem for non-registered users? If so, there might be DOS or even security (race condition) vulnerabilities to exploit. The email confirmation thing helps, but it's not hard to write a bot that can find a link in an email. What are the risks of letting a bot register successfully on your site? Balance that against the effort it takes to block them, and you may find that it's "good enough" even without blocking it.
On Tue, Feb 17, 2009 at 4:02 PM, Kelly Thompson <[email protected]> wrote: > So if I don't use captchas (having tons of trouble with all of them, due to > dependencies, and being on a shared host) what is a good "text" method? > Or any method actually that will help with spam, and DOS attacks... > > Currently you have to register and then click a link in your email that we > send, to activate your account anyway. > > Is that enough? > > What else can I do? > > > Thanks before hand!! > > > > > On Tue, Feb 17, 2009 at 6:09 PM, Bill Ward <[email protected]> wrote: >> >> On Tue, Feb 17, 2009 at 3:09 PM, Bill Ward <[email protected]> wrote: >> > On Tue, Feb 17, 2009 at 3:01 PM, Josh Rosenbaum <[email protected]> >> > wrote: >> >> I just prefer the minimum amount of interference to users on all >> >> websites. Clearly for huge websites that demands an image/audio captcha, >> >> but >> >> often I find they are overkill and just hinder normal users. >> > >> > I agree they're not really necessary; you have to weigh the cost and >> > benefit to see what the right balance is. >> >> I meant to say not ALWAYS really necessary :) >> >> _______________________________________________ >> templates mailing list >> [email protected] >> http://mail.template-toolkit.org/mailman/listinfo/templates > > > > -- > Kelly Thompson > Vice President > Live Audio Magazine Inc. > www.liveaudiomag.com > (919) 389-5784 > _______________________________________________ templates mailing list [email protected] http://mail.template-toolkit.org/mailman/listinfo/templates
