News:

CPG Release 1.6.29
During HTML5 upload, keep pseudo blank code 200 messages from triggering error condition
added Russian language
correct failure to use theme menu icons in album manager
minor vulnerabilities mitigation

Main Menu

Reject 'throw away'-email adresses for registration?

Started by lamama, April 12, 2006, 01:14:14 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

lamama

Every now and then I have new registrations whith 'throw away'-email adresses like mailinator.com, spamgourmet.com or mytrashmail.com. Normally my coppermine runs with email activation and admin activation seems not suitable to me.

Is there a way (mod) to reject those adresses during the process of creating an account, maybe something like a blacklist?


lamama

yeah, thanks. i searched, but used the wrong search phrases...

lamama

Sorry, but the linked Mod is missing a core feature: it restrics the number of allowed email-domains to exactly one. That's not exactly what I looked for  ::)


Tranz

I wrote a mod to reject aol addresses. It could probably be edited to go through a list of addresses instead of just rejecting from one domain.

Tranz

Oops. It turns out the mod I did was to reject aol addresses for ecard recipients. I'll look into doing it for registrations.

Tranz

#6
Here it is. You'll need to edit register.php

FIND:
    if (!eregi("^[_\.0-9a-z\-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,6}$", $email)) $error .= '<li>' . $lang_register_php['err_invalid_email'];

REPLACE with:
$disallowed_domains = array('aol.com', 'blah.com', 'bleh.com');
list($email_userName, $email_domain) = split("@", $email); //from sitepoint.com
if (!eregi("^[_\.0-9a-z\-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,6}$", $email)) {
$error .= '<li>' . $lang_register_php['err_invalid_email'];
}
if (in_array($email_domain, $disallowed_domains)) {
$error .= '<li>The email address domain is not allowed';
}


This could be improved upon by making the addresses configurable, and the error text internationalizable.

lamama


lamama

Here is a list of disposable email address-providers I found.

$disallowed_domains = array('bumpymail.com', 'centermail.com', 'centermail.net', 'discardmail.com', 'dodgeit.com', 'e4ward.com', 'emailias.com', 'fakeinformation.com', 'front14.org', 'ghosttexter.de', 'gishpuppy.com', 'jetable.net', 'kasmail.com', 'link2mail.net', 'mailexpire.com', 'mailinator.com', 'mailmoat.com', 'messagebeamer.de', 'mytrashmail.com', 'nervmich.net', 'netmails.net', 'netzidiot.de', 'nurfuerspam.de', 'privacy.net', 'punkass.com', 'sneakemail.com', 'sofort-mail.de', 'sogetthis.com', 'spam.la', 'spambob.com', 'spambob.net', 'spambob.org', 'spamex.com', 'spamgourmet.com', 'spamhole.com', 'spaminator.de', 'spammotel.com', 'spamtrail.com', 'trash-mail.de', 'trashmail.net', 'wuzup.net');