search

lsascha / registeraddress

newsletter registration extension to tt_address made in Extbase + Fluid for Typo3. with double-opt in, user editing and unsubscribing
GNU General Public License v2.0
7 stars 18 forks source link

Captcha integration for unregister site/link #46

Open ftrojahn opened 6 years ago

ftrojahn commented 6 years ago

After a while I found out that some users got unsubscribed from the newsletter when answering the newsletter mail or maybe even reading only - don't know.

I suspect some windows Antivir software calling the link in background.

Any idea how to integrate some 'do you really want ...' button or even captcha to the unregister page?

lsascha commented 6 years ago

mh. interesting observation. I don't think answering a mail would unregister. For that the server would need to receive the e-mail and do something according to that unless the receiver would click on the link in the e-mail of the user, since it would include the link of the user.

An idea how that could be happening is: i have read that browsers started including preloading of links for faster loading. If exactly this happens and the browser would preload the unsubscibe link, it would execute the unsubscibtion just by opening the mail with the link.

Will have to read more about that and if it is possible to disable for specific links. I never experienced it myself though and i would still doubt that this is done for e-mails especially, since spammers could then easily check if a mail-address is really existing just when a user opens a mail. And double-optin confirmation links would also be automatically executed.

lsascha commented 6 years ago

a captcha to unregister is possibly not according to the general rights in the EU where you probably need to be able to unregister easily without any hurdles. Captchas are always an additional hurdle for users.

ftrojahn commented 6 years ago

Thanx for your quick replies.

A button for confirmation surely would be enough - but since there had been several unintended unsubscriptions, even by experienced users, I doubt it was by accident.