简体   繁体   English

在PHP中设置动态用户级别

[英]Setting Dynamic User Level in PHP

I have a security problem with a user who we've banned over and over. 我的用户被一次又一次禁止使用时遇到安全问题。 They continuously re-register to the site and use proxies to get around the IP Ban. 他们不断地重新注册该站点,并使用代理来绕开IP禁令。

We use Phpmyadmin and sql databases for the user table and already have everyone that registers automatically set to "0" which means they are registered by not an admin. 我们将Phpmyadmin和sql数据库用于用户表,并且已经将每个注册的人自动设置为“ 0”,这意味着它们不是由管理员注册的。

I was wondering if there is a way to dynamically set this person's user level when they register a new screen name - because they use the same email address every time. 我想知道当他们注册一个新的屏幕名称时,是否有办法动态设置此人的用户级别-因为他们每次都使用相同的电子邮件地址。 We have most of the site protected so that they are required to login and have a set permission level to see things. 我们对大多数站点进行了保护,因此要求他们登录并具有设置权限才能查看内容。 So if possible, when they register another login name it automatically sets that specific user ONLY to whatever number I designate and identifies it by the email address they are entering. 因此,如果可能的话,当他们注册另一个登录名时,它将自动将该特定用户设置为我指定的任何数字,并通过他们输入的电子邮件地址进行标识。

Anyway to do that, or anyone have any better ideas? 无论如何,还是有人有更好的主意?

One idea is to do what craigslist does to people. 一种想法是做craigslist对人所做的事情。 It is called ghosting. 这称为重影。 It is a good thing to google. 对Google来说是一件好事。 Basically a user thinks they are posting, but no one else ever sees their stuff. 基本上,一个用户认为他们正在发布,但是没有其他人看到他们的东西。 When they go to the listing, wow it is there. 当他们转到清单时,哇它在那里。 When they go to the category, it is there. 当他们进入类别时,就在那里。

I realize that CL is quite different than say a chat forum. 我知道CL和聊天论坛完全不同。 And the user would be wondering why no one took offense to them calling someone a fatso, live. 用户会想知道为什么没有人冒犯他们,称某人为胖子。 But for non-interactive, non-realtime environments, they would have no idea they are ghosted. 但是对于非交互式,非实时的环境,他们根本不知道它们会被重影。 Well, I shouldn't say that. 好吧,我不应该这样说。 Maybe their friend tells them they can't see it. 也许他们的朋友告诉他们他们看不到它。

If they can pull off the proxy thing, creating a new email address would be a piece of cake. 如果他们能够完成代理任务,那么创建一个新的电子邮件地址将是小菜一碟。 Don't tip them off to the ghosting, let them continue to do their thing, isolate, and ignore (if it is even possible). 不要让他们陷入重影,让他们继续做自己的事情,孤立并忽略(如果可能的话)。

good luck 祝好运

声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM