Author Topic: email signups - not a good idea  (Read 8323 times)

valuehosted

  • Posts: 40
    • View Profile
    • http://www.phpreviews.com
email signups - not a good idea
« on: December 09, 2004, 08:06:18 am »
This is an interesting article why not to use the option to allow for signups via email.

http://emailuniverse.com/ezine-tips/?id=1219&cat=strategy

--Tone

DW

  • Administrator
  • Posts: 3787
    • View Profile
    • https://legacy.listmailpro.com
email signups - not a good idea
« Reply #1 on: December 09, 2004, 10:37:11 am »
The article points out a very big drawback to the email subscribe feature.  It is recommended that you *never* post an email address on the web and this must also be extended to include subscribe links.  Of course, some people prefer to learn the hard way so I will continue to offer the feature.

Forms are not exempt from abuse.  I once received a "nigerian bank" spam through my contact form as a pre-sales question.  It's just a matter of time before spam "terrorists" flood any form they can get their hands on.  Everyone, not just well-known companies, will need to use the "skewed-font image" technique to verify that submissions come from a human.
Dean Wiebe
ListMailPRO Author & Developer - Help | Support | Hosting

valuehosted

  • Posts: 40
    • View Profile
    • http://www.phpreviews.com
email signups - not a good idea
« Reply #2 on: December 09, 2004, 10:43:19 am »
well yes, but the difference between having email links and subscription links is that instead of getting spam, youre now sending out subscription notifications.

A form is much harder to abuse that way.  but yeah a skewed font thing would be a great addition.. is it in the works?

--Tone

DW

  • Administrator
  • Posts: 3787
    • View Profile
    • https://legacy.listmailpro.com
email signups - not a good idea
« Reply #3 on: December 09, 2004, 10:54:44 am »
There must be some existing image generators / processors you can implement easily into your form.

I was just visiting a high-profile marketer's site and noticed he used a delayed javascript to present a Yes / No dialog which then leads the user to send a blank email.

With this method, or any method using JavaScript, you could encrypt the email address so that it could not be discovered in HTML and your address would not be able to be found on the web!  Of course, if your email address is john@site.com then you can expect a few false subscriptions from spammers that "guess". :)
Dean Wiebe
ListMailPRO Author & Developer - Help | Support | Hosting

valuehosted

  • Posts: 40
    • View Profile
    • http://www.phpreviews.com
email signups - not a good idea
« Reply #4 on: December 09, 2004, 11:06:48 am »
yeah thats called a dictionary attack; my admin set up a disctionary attack protection script.  Quite handy really.

Would love to see a skewed image included though as an option.

http://perlmonks.thepen.com/124732.html - for some skewed image info... and some guy with way too much time on his hands.

--Tone

DW

  • Administrator
  • Posts: 3787
    • View Profile
    • https://legacy.listmailpro.com
email signups - not a good idea
« Reply #5 on: December 09, 2004, 11:48:51 am »
I did a search for "php image verification" on Google and came up with phpNoise.  It looks promising:

http://www.phpnoise.com/tutorials/1/1

I will definitely consider this for ListMail.  I agree that it would be a very cool, original, professional feature.
Dean Wiebe
ListMailPRO Author & Developer - Help | Support | Hosting

bbc

  • Posts: 24
    • View Profile
Prevent spam, image verification
« Reply #6 on: August 28, 2007, 10:08:25 am »
Looks like this idea fell by the wayside?

Any tips on how to implement/add-on one easily?

Thanks!
B