[Tutor] Security

Kirk Bailey highprimate@howlermonkey.net
Mon, 31 Dec 2001 22:3:25 -0500


OK, now comes an intresting task.

ACTUALLY Adding them to the list, or removing them.

At this point there are security issues. Is this REALLY sistermaryjoe@ourladyofendlessblessing.org signing up 
for the 'evil-humor' list? Or someone looking to annoy sister mary Joe?

We can send them a letter, and have it come back with a secret code. Something along these lines is a commonly 
used ploy.

We can just sign them up at this point; it's been done.

We already have unsubscribe information in the footer, so they can go to the site and unsub if they want to, 
but this means other people can annoy them with unwanted subs, and we really want to prevent this, would'nt 
you?

We could do something else, but bless me if I know what that something else is!

So I guess that we will do a simple email process here, and a random number generation, and send that to them 
in the subject, and let them reply to it. the subject would be in the form of:

command listname randomnumber

If they give us a good random number, the file maintainer puts their email address in that list. Bad address, 
bad listname, or bad random number and it barks.

Comments or discussion?
 


end

In total confusion,
                   Kirk D Bailey

|----------------------------------------------------|
|           Consulting  Agent  Provecateur           |
|    Webmaster, Howlermonkey Email services Co.      |
|   Please visit us at http://www.howlermonkey.net/  |
|----------------------------------------------------|