I was just wondering if requiring email verification for accounts would help safeguard phuks a bit from those that will see its existence as a problem?
If that's a stupid idea or wouldn't work, let me know. As I have very little knowledge with how the technicalities of it all.
The only easy and effective way is putting rate limits and captchas everywhere.
We currently have a captcha on registration, but that wouldn't stop someone from manually registering 500 accounts and then script them to spam the whole site though.
Well I hope that it never becomes a problem that needs fixing to begin with but if this blows up, it likely will.
Also side note, is there a way to respond to comments via the message page, or is it relegated to only pm's?
Thank you, I did no know it was that easy to bypass email verification. Is there any effective way mass bots can be stopped?