Reject 'throw away'-email adresses for registration? Reject 'throw away'-email adresses for registration?
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Reject 'throw away'-email adresses for registration?

Started by lamama, April 12, 2006, 01:14:14 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

lamama

Every now and then I have new registrations whith 'throw away'-email adresses like mailinator.com, spamgourmet.com or mytrashmail.com. Normally my coppermine runs with email activation and admin activation seems not suitable to me.

Is there a way (mod) to reject those adresses during the process of creating an account, maybe something like a blacklist?


lamama

yeah, thanks. i searched, but used the wrong search phrases...

lamama

Sorry, but the linked Mod is missing a core feature: it restrics the number of allowed email-domains to exactly one. That's not exactly what I looked for  ::)


Tranz

I wrote a mod to reject aol addresses. It could probably be edited to go through a list of addresses instead of just rejecting from one domain.

Tranz

Oops. It turns out the mod I did was to reject aol addresses for ecard recipients. I'll look into doing it for registrations.

Tranz

#6
Here it is. You'll need to edit register.php

FIND:
    if (!eregi("^[_\.0-9a-z\-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,6}$", $email)) $error .= '<li>' . $lang_register_php['err_invalid_email'];

REPLACE with:
$disallowed_domains = array('aol.com', 'blah.com', 'bleh.com');
list($email_userName, $email_domain) = split("@", $email); //from sitepoint.com
if (!eregi("^[_\.0-9a-z\-]+@([0-9a-z][0-9a-z-]+\.)+[a-z]{2,6}$", $email)) {
$error .= '<li>' . $lang_register_php['err_invalid_email'];
}
if (in_array($email_domain, $disallowed_domains)) {
$error .= '<li>The email address domain is not allowed';
}


This could be improved upon by making the addresses configurable, and the error text internationalizable.

lamama


lamama

Here is a list of disposable email address-providers I found.

$disallowed_domains = array('bumpymail.com', 'centermail.com', 'centermail.net', 'discardmail.com', 'dodgeit.com', 'e4ward.com', 'emailias.com', 'fakeinformation.com', 'front14.org', 'ghosttexter.de', 'gishpuppy.com', 'jetable.net', 'kasmail.com', 'link2mail.net', 'mailexpire.com', 'mailinator.com', 'mailmoat.com', 'messagebeamer.de', 'mytrashmail.com', 'nervmich.net', 'netmails.net', 'netzidiot.de', 'nurfuerspam.de', 'privacy.net', 'punkass.com', 'sneakemail.com', 'sofort-mail.de', 'sogetthis.com', 'spam.la', 'spambob.com', 'spambob.net', 'spambob.org', 'spamex.com', 'spamgourmet.com', 'spamhole.com', 'spaminator.de', 'spammotel.com', 'spamtrail.com', 'trash-mail.de', 'trashmail.net', 'wuzup.net');