I was just wondering if requiring email verification for accounts would help safeguard phuks a bit from those that will see its existence as a problem?
If that's a stupid idea or wouldn't work, let me know. As I have very little knowledge with how the technicalities of it all.
The only easy and effective way is putting rate limits and captchas everywhere.
We currently have a captcha on registration, but that wouldn't stop someone from manually registering 500 accounts and then script them to spam the whole site though.
Well I hope that it never becomes a problem that needs fixing to begin with but if this blows up, it likely will.
Also side note, is there a way to respond to comments via the message page, or is it relegated to only pm's?
Advanced bots CAN shrug off email validation (they could manage their own email addresses and just follow the links), it's no better than a regular captcha