Tag Info

Hot answers tagged

8

Depending on your target audience ('normal', very tech savvy, or originating from social networks) either: email address & password (the email address is the username) or OpenID, Facebook Connect, or similar federated login. Both have their issues. In some audiences email addresses change a lot. You need a good account recovery mechanism, ...


7

A couple reasons come to mind: The signup process is awaiting e-mail verification. It's not uncommon to force users to verify their e-mail addresses before allowing them access to a service (particularly if the service is concerned about spammers or plans to send promotional e-mails to account holders). Forcing the user to enter the credentials they just ...


6

An easy way to detect bogus email addresses is to send an email to the address with a confirmation link inside. If the user doesn't click on the confirmation link their account is not activated and they can't use their website until they do. This will catch fake email addresses but not prevent someone from creating a throw away address. However, this will ...


5

That depends very much on how important the site you are talking about is going to be. It is not unknown for spammers and such to buy those "alternative" domain names because people tend to make spelling mistakes and then land on those pages. Of course this will only happen if your site is really huge, otherwise nobody will bother. Some slight variations ...


4

Facebook login integration will let you do just about anything you want. One complaint people have is that it changes pretty often and that you need to invest a decent amount of time in keeping up with it. If your goal is to stick with Facebook only and use a lot of the more advanced features then there is value in using it. However, if you are looking ...


4

Spam and bots. If you signup and are instantly in and able to post or interact with the site, whats stopping you from logging out doing it again and doing it nonstop? Nothing. By making you login you have to at least memorize the data you put into the login name and password fields, which is a step not all bots have built in so you're instantly knocking out ...


4

not sure if this helps, but here seems to be a list of accredited registrars: http://www.cctld.ru/en/registrators/


4

Use autocomplete="off" to disable autocomplete and Firefox (and other browsers who support this non-standard attribute) will not save those values. <input type=text" name="dontsave" autocomplete="off"> Edit: What you're seeing may be due to the field names you are using. Auto-complete looks for common username/login field names to work and your ...


4

You will not be able to prevent people from registering as many times as they like - losing game, even if you implement IP tracking, phone number or SMS verification, et cetera (if you're giving away something worth money, I can assure you that someone out there will gladly game your system). Do not provide anything free unless you can literally afford to ...


4

Godaddy will hold the domain after is expires for a period of several months. If your renew domain more than 19 days after expiry, then there is a redemption fee added. This redemption fee can be sizable. Godaddy's help pages say that the latest you can recover the expired domain is 42 days. Even after the 42 days, the domain may not go back onto the ...


4

You shouldn't avoid purchasing a domain just because other extension variations have already been purchased - if you like it and it's available, go for it. In regards to a bigger company who shares a domain name with a bigger extension - they may contact you to purchase it off you but it's all on your own terms - as long as you make it clear on your page ...


4

I imagine that if economic embargoes/sanctions were to be enforced over the internet, it wouldn't be enforced at the website level. Think about how impractical it would be to require every webmaster out there to keep an updated list of embargoed countries and have to block all visitors from that country. And it's not like a North Korean internet user has a ...


4

Without storing the passwords you can only evaluate the quality by counting the number of different types of character (upper case, numbers, special characters) when the user first sets or subsequently resets their password. You could enable the counting and store that information (you just need the number of characters and the number of each type of ...


4

I would not create fake accounts to make it look as if the site is populated as that can backfire on you in too many ways. Unless you are very skilled at creating content that looks like it is from different people you may find that your users will be able to spot the fake accounts. Always remember that humans are pattern-seeking mammals and if the ...


4

If it truly is a redirect of a new domain (and I say this because a lot of companies get this wrong) then there will only be the root domain indexed in search engines anyhow so when the new website goes live and the redirect removed, it won't take a search engine long to see that and then start indexing the new site on the new domain. There is minimal ...


3

It's a bad idea because: 1) It does risk appearing to be a link farm or some other form of manipulation to Google. And that's because it is doing exactly that. This is exactly the kind of stuff is cracking down on. 2) Those websites will have no SEO value because they will be weak one page sites with virtually no SEO value themselves (no internal links, ...


3

You should make sure the email address is not only real but in the control of the registrant. Send an email to that address with an activation link inside. Make visiting that link a requirement for activating their account. That way you know the email is both real and in the control of the user. One check you may want to consider making is checking the DNS ...


3

These days I will not register with a website if the website has not already proved its greate value to me. However I am more willing to login with Facebook or gmail (openID) as I don't have the pain of yet another password. So if you website MUST make people log in, then you are likely to get more users with Facebook connect and openId. However remember ...


3

asking to repeat password This is good as it helps to flush out mistyped passwords. If someone types it in incorrectly this should theoretically catch it. It helps to prevent the user from being able to login for the first time which would certainly be a negative user experience. asking to have a certain length-password This is not a bad idea but ...


3

I believe requiring user accounts for basic interaction with a website (like in your case) creates a poor user experience. You're much more likely to entise the odd few users to give some input if you make the process as easy as possible. To make the process as easy as possible and succeed in harvesting a bit of info from your visitors I would: Scrap the ...


3

It's not if you decide to limit your users' login options to those domains. Many people will use services like yahoo.ca or yahoo.cn or AOL or their ISP or company domain as a primary mail service. You are disabling all of them from your website. Note that users who use their company or personal websites as primary emails are usually advanced users who will ...


3

In addition to weak patterns, we hash an entry and try to look it up from one of the largest known password list available at https://dazzlepod.com/uniqpass/.


3

There are certain CCTLDs that are offered directly to the customers by the Registrar. Registries like Verisign(for .COM and .NET) follow the Registry->Registrar model. A Registrar uses channels to register the domain names for the end clients. The Registry sells the domain names through its network of accredited Registrars(accredited by ICANN) Telecom ...


2

First of all, when it comes to variations, you'll have access to all the subdomains that you could ever want, so choices of variations are at your fingertips already. e.g. i.areallygood.com iphone.areallygood.com, my.areallygood.com If you have .com, that's the primary name to have control over. Misspellings will only matter if you make the site ...


2

There's issues with both, believe it or not. People change their email almost constantly, it seems. The younger they are, the worse it is. For this reason, it's tough to tie accounts to email. However, emails seem far easier for people to remember than usernames. Usernames are great in that they don't often change, but people do often forget them. Then ...


2

From Wikipedia Domains may be registered on the second level (john.name) and the third level (john.doe.name). It is also possible to register an e-mail address of the form john@doe.name. Such an e-mail address is a forwarding account, and requires another e-mail address as the recipient address. When a domain is registered on the third level ...


2

Great answer from danlefree, but let me touch on the two methods that you mentioned before and their suspected outcome. Even though your specific demographic may not be computer savvy, let's just assume that they are the Average Joe (AJ for short). IP tracking is a good way to deter a fair amount of abuse simply because people aren't knowledgeable enough ...


2

This is a "halfway there" solution that a lot of reputable SEO's utilize. The problem is that there doesn't seem to be any time taken to build up the sites, and having only one page doesn't help either. Google ranks keyword oriented domains very well if they are built correctly. If there is mid-to-low competition for a keyword phrase it's very easy to build ...


2

They can only tell if it's a valid email address if that person has registered with your site, so it all depends on how popular your site gets. I don't think that converting it to camelcase will change anything as they can easily convert to lower case or upper case if necessary. Have you thought of putting a captcha on the site? Google's ReCaptcha is ...


2

Single Sign-On solutions are probably your best bet. The following are all OpenID providers (though some services, like Janrain, PingIdentity, onelogin, etc. support multiple protocols, and Facebook Connect also has its own API): Janrain myOpenID Google myOneLogin PingIdentity onelogin Facebook Connect Janrain is probably the most comprehensive service, ...



Only top voted, non community-wiki answers of a minimum length are eligible