电子邮件确认后如何将用户添加到数据库？

Question

I have a website built with PHP Codeigniter framework. It has an user management system. Generally, what it does is, when an user registers, it add his information to database and sends a conformation email(like other systems).

But now some spammers are creating lots of accounts. They don't verify the email though. Just add more records to the database. However, my database is getting heavy for this. How can I prevent this?

Is there any workflow by which I can add an user after his email confirmation?

Thanks in advance.

Answer 1

• You can add some captcha or security as say in comment's.
• You can also, with codeigniter, easily get the user ip with the function ip_adress and limit the creation of an account by ip.
• Set a cron function to disable inactivated accounts everyday/week to lighter you database with useless account...
• Use Analitics and see where the spam come from, and blacklist the concerned countries.

There is many solutions but none of them is perfect or 100% effective :/

Answer 2

it is not possible to insert the user after sucessfully confirmation mail you can follow some steps to restrict the users

1. create a captcha in your registration form
2. make a new table ie blueprint of your registration table so the user register go to this new table then if the user is confirm there mail then the record move to orginal registation table and delete from the new one
3. to blok the user by one user one ip is not a good solution so don't restrict them
4. just run a cron job on every 3 day on the new blueprint of the table so the users that is not confirm their mail simply remove all the entries from the new table on every three days on every week. thats it Thanks.

Answer 3

PDO Prepared Statements validate function

$result = Database::getInstance()->query("SELECT * FROM user ORDER BY id DESC WHERE 1");

this should get you the last database entry now you should read out the verification status and delete unverified user or add veriefied user

in your Database class you should have a functin that buils your sql query and build a array with the values you want to inject

public function query($query, array $parameters = array())
{
    $statement = $this->connection->prepare($query);

    foreach($parameters as $key => $value)
    {
        $statement->bindValue(':'.$key, $value);
    }

    $statement->execute();
    return $statement->fetchAll(PDO::FETCH_ASSOC);
}

Answer 4

• Best Solution is to use Google reCaptcha
• Use Check for E-Mail address legal validation