ensignlee / ssbook

ssbook
5 stars 3 forks source link

Verify that users are not bots #163

Closed ensignlee closed 12 years ago

ensignlee commented 12 years ago

So I think it's time to start verifying that some of our signups are not bots.

To that end, I'd like to add a verification email to our signup process. When they sign up, send an email to the address that they signed up with, with some sort of verification : maybe that could be them clicking on a link in the email or something (I'm sure you've seen that with other sites).

Plus,t his will make sure we have real emails instead of &^&@%&@%&@%@uselessdomain.com .

(This can be an issue we assign to our new developer)

camerondavison commented 12 years ago

This is probably poorly named. I am pretty sure bots can do this. More likely this is just verifying that the users have emails.

ensignlee commented 12 years ago

Okay, have it your way lol. Name changed

ensignlee commented 12 years ago

So I was testing this and came across a slight problem. If a user registers, but then doesn't go to his email to confirm his registration, his login just keeps failing, with no explanation. Furthermore, the password field adds in all these extra characters to his login.

I can see this being very confusing for users and this may be why we haven't had new users in a little bit. Can we add some sort of message saying

"Thanks for registering for SharpBetTracker.com. Please check your email and confirm your registration before logging in." whenever they fail to log in in this way?

Otherwise, I can see users thinking that our site is completely broken since after they register, they can't log in.