Hello every body I had a question
I am involved in a project where I need to verify the user's email
address by sending them an email and asking them to click on a link. now
I have done this but my link is human readable(exampl e
validator.aspx? address="bl**@b lah.com") so any user can just type in
their email address into that link and it will validate it for them...
now what I want to do is to encrypt this email but most of the
encryption methods that I have searched into end up giving me a very
long strings but most professional websites that I have seen have done
this but they use a very short encrypted string.. can somebody give me
some hints on how to go about this...what is the best most professional
method to use?
btw i am coding this in asp.net 2.0 C#
thank you in advance
Awaiting your responds
---
Best Regards
Amir
*** Sent via Developersdex http://www.developersdex.com *** 12  1426 
When thinking about encryption always as yourself if you need to transmit
this info...
IMO those sites are not encrypting at all. They just create a unique
impossible to guess ID and this id is included in the mail... Server side
they know the address that is tagged with this unique id is valid...
Patrice
--
"Amir Ghezelbash" <am*****@rogers .com> a écrit dans le message de
news:OV******** ******@tk2msftn gp13.phx.gbl...
Hello every body I had a question
I am involved in a project where I need to verify the user's email
address by sending them an email and asking them to click on a link. now
I have done this but my link is human readable(exampl e
validator.aspx? address="bl**@b lah.com") so any user can just type in
their email address into that link and it will validate it for them...
now what I want to do is to encrypt this email but most of the
encryption methods that I have searched into end up giving me a very
long strings but most professional websites that I have seen have done
this but they use a very short encrypted string.. can somebody give me
some hints on how to go about this...what is the best most professional
method to use?
btw i am coding this in asp.net 2.0 C#
thank you in advance
Awaiting your responds
---
Best Regards
Amir
*** Sent via Developersdex http://www.developersdex.com ***
you mean a GUID ...if i do that ..then how would i know which email is
it that they are trying to validate ?
their account could have more then one email address!
i have to somehow include the email address inot the link
---
Best Regards
Amir
*** Sent via Developersdex http://www.developersdex.com ***
When the user submits their email address, and you store that address in a
table (perhaps CustomerEmail), also store the GUID in a column. Therefore,
you have a link between the GUID and a specific email address. Just be sure
to use a randomly generated id like a guid instead of sequentially generated
id, becuase it is more difficult to hack.
"Amir Ghezelbash" <am*****@rogers .com> wrote in message
news:ua******** ******@tk2msftn gp13.phx.gbl...
you mean a GUID ...if i do that ..then how would i know which email is
it that they are trying to validate ?
their account could have more then one email address!
i have to somehow include the email address inot the link
---
Best Regards
Amir
*** Sent via Developersdex http://www.developersdex.com ***
"bradley" <so*****@micros oft.com> wrote in message
news:en******** ******@TK2MSFTN GP14.phx.gbl... When the user submits their email address, and you store that address in a
table (perhaps CustomerEmail), also store the GUID in a column. Therefore,
you have a link between the GUID and a specific email address. Just be
sure
to use a randomly generated id like a guid instead of sequentially
generated
id, becuase it is more difficult to hack.
"Amir Ghezelbash" <am*****@rogers .com> wrote in message
news:ua******** ******@tk2msftn gp13.phx.gbl...
you mean a GUID ...if i do that ..then how would i know which email is
it that they are trying to validate ?
their account could have more then one email address!
i have to somehow include the email address inot the link
---
Best Regards
Amir
*** Sent via Developersdex http://www.developersdex.com ***
As a sidenote, if you want small values instead of the long value GUID's
represent, you may want to look into Identity columns (incremented numeric
values).
Mythran
Yes such as a GUID but it doesn't have (and shouldn't be IMO) the profile
GUID (to avoid giving away an information that could be used some later day
maliciously).
I was thinking rather to something like a "job id".
The whole process would be :
- the user registers a new mail address (I suppose it goes in a child table
of its profile with its own unique id)
- register in the job table a new job with its unique id and the id of the
mail address to validate
- send the validation link
When the user clicks the link :
- retrieve the id of the mail to validate from the job table
- update the address record to mark the address as validated
- delete the record from the job table
If the user is allowed to change its mail, you may want also to do the same
process so that the updated address is validated (though it could be still
the same record id in the db).
Something along these lines...
Patrice
--
"Amir Ghezelbash" <am*****@rogers .com> a écrit dans le message de
news:ua******** ******@tk2msftn gp13.phx.gbl...
you mean a GUID ...if i do that ..then how would i know which email is
it that they are trying to validate ?
their account could have more then one email address!
i have to somehow include the email address inot the link
---
Best Regards
Amir
*** Sent via Developersdex http://www.developersdex.com ***
You are right that an identity column could be stored as a much smaller
integer value. However, the problem with identity values is that they are
sequntially generated and it would be easy for the user to alter the url to
point to another record.
For example, let's assume the following URL were emailed back to the user:
validator.aspx? confirmation=45 7
They could edit the ID like so before submitting the link, thus validating
another unrelated user or perhaps even gaining entry to another account.
validator.aspx? confirmation=45 5
"Mythran" <ki********@hot mail.comREMOVET RAIL> wrote in message
news:%2******** ********@TK2MSF TNGP09.phx.gbl. ..
"bradley" <so*****@micros oft.com> wrote in message
news:en******** ******@TK2MSFTN GP14.phx.gbl... When the user submits their email address, and you store that address in
a table (perhaps CustomerEmail), also store the GUID in a column.
Therefore, you have a link between the GUID and a specific email address. Just be
sure
to use a randomly generated id like a guid instead of sequentially
generated
id, becuase it is more difficult to hack.
"Amir Ghezelbash" <am*****@rogers .com> wrote in message
news:ua******** ******@tk2msftn gp13.phx.gbl...
you mean a GUID ...if i do that ..then how would i know which email is
it that they are trying to validate ?
their account could have more then one email address!
i have to somehow include the email address inot the link
---
Best Regards
Amir
*** Sent via Developersdex http://www.developersdex.com ***
As a sidenote, if you want small values instead of the long value GUID's
represent, you may want to look into Identity columns (incremented numeric
values).
Mythran
thanks alot guys...
i have decided to go with tripleDES encryption method to encrypt the
query string and save the key in the registry so only admin can have
access to it ?
any comments?
---
Best Regards
Amir
*** Sent via Developersdex http://www.developersdex.com ***
Just out of curiosity, reply back with some examples of your encrypted
query strings.
"Amir Ghezelbash" <am*****@rogers .com> wrote in message
news:%2******** **********@TK2M SFTNGP12.phx.gb l... thanks alot guys...
i have decided to go with tripleDES encryption method to encrypt the
query string and save the key in the registry so only admin can have
access to it ?
any comments?
---
Best Regards
Amir
*** Sent via Developersdex http://www.developersdex.com ***
here whats my link looks like
validator.aspx? Confirmation=
+Iwq+rx0pQJeRHr Gz+dnNf2T+iiG1G 4/1Bv1DDwxpbk=
---
Best Regards
Amir
*** Sent via Developersdex http://www.developersdex.com *** This thread has been closed and replies have been disabled. Please start a new discussion. Similar topics | |
by: Chuck Anderson |
last post by:
Can anyone point me in the right direction? I want to use Php to
automate confirmation of someone joining an email list by them replying
to an email (so they don't have to have a browser?).
I will probably use a hyperlink with a unique ID, but I also want to
know how to go about reading from a mailbox with Php so I can use an
email reply method, too.
I'm having trouble finding any kind of tutorial. From the bit of
searching I've done,...
|
by: dmiller23462 |
last post by:
So here's my problem.....I need to set up different email
distributions based on which option in the following Select form has
been chosen....For instance if "Putaway" is chosen it needs to email
User1@here.whatever and User4@here.whatever but if "Loaded" is chosen
it needs to email User2@here.whatever and User3@here.whatever, etc,
etc...
I'm aware that the only thing that really needs to change is the
"Mail.AddAddress" line (at least...
|
by: Mike |
last post by:
Is there a way to determine what a user's default email client is? I
read a post from 3 years ago that said no. I guess I'm hoping
something has come along since then.
|
by: BSG-SMTP-Gateway |
last post by:
The following message sent by this account has violated system policy:
Connection From: 64.253.55.90
From: python-list@python.org
To: terriss@birdsall.com, q4dzsAEAAAAA@birdsall.com, zSbxT7FSCIAEAAAAA@birdsall.com, rQEAAAAA@birdsall.com, 20a.9ea7bfe.306372db@birdsall.com, Gslotnick@birdsall.com, chrisbaker@birdsall.com, mshawver@birdsall.com, SJCSmile@birdsall.com, Pugsleydmd@birdsall.com, FredBMaier@birdsall.com, dbosco6896@birdsall.com,...
|
by: libsfan01 |
last post by:
Hi all!
Can anyone show me how to check and email field on a form for the
existence of these two characters.
Kind regards
Marc
| | |
by: g0c |
last post by:
hi,
how to hide or replace email addresses in php mail function
with something like "group" so the email addresses to which email
is sent are not visible ?
i have :
$subs = "email1@dot.com, emai2@dot.com, email3@dot.com"
$header .= "To : email@notset.com\r\n";
|
by: Erik Johnson |
last post by:
THE GOAL: I need to send an email with a simple ASCII text body and an
attached HTML file.
I have scripts that send basic emails via the smtplib module that don't
have any attachements and that seems to work fine. I first looked at the
mimetools modules but it says it is depreceated since 2.3, so I started
trying to use the email module. Here is a script that basically follows the
second example given in section 7.1.13 of the Python...
|
by: Craig Hurley |
last post by:
Hello,
user@x.com receives an email from user@a.com. I want to forward that
email to user@y.com. I want the contents/header to remain intact, with
the exception of adding "X-Forwarded-For". In other words, when
user@y.com received the email, it will be from user@a.com, but will
contain a reference that it was forwarded by user@x.com.
I'm piping all email destined for user@x.com to a php script. I've seen
some very complicated...
|
by: IGD |
last post by:
I don't know if this is the right place to post this or not. If not,
could someone direct me elsewhere where I would find more information
on how to solve my problem? Thanks!
My problem is this: I am writing an application for work. This
application sends a basic html email via SMTP to a group. In this
group are individual people's emails, but also about 5 other groups.
The problem is that the email is only getting received by (or sent...
|
by: Hystou |
last post by:
Most computers default to English, but sometimes we require a different language, especially when relocating. Forgot to request a specific language before your computer shipped? No problem! You can effortlessly switch the default language on Windows 10 without reinstalling. I'll walk you through it.
First, let's disable language synchronization. With a Microsoft account, language settings sync across devices. To prevent any complications,...
|
by: jinu1996 |
last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth.
The Art of Business Website Design
Your website is...
| | |
by: Hystou |
last post by:
Overview:
Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
|
by: tracyyun |
last post by:
Dear forum friends,
With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
|
by: agi2029 |
last post by:
Let's talk about the concept of autonomous AI software engineers and no-code agents. These AIs are designed to manage the entire lifecycle of a software development project—planning, coding, testing, and deployment—without human intervention. Imagine an AI that can take a project description, break it down, write the code, debug it, and then launch it, all on its own....
Now, this would greatly impact the work of software developers. The idea...
|
by: isladogs |
last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM).
In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules.
He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms.
Adolph will...
|
by: TSSRALBI |
last post by:
Hello
I'm a network technician in training and I need your help.
I am currently learning how to create and manage the different types of VPNs and I have a question about LAN-to-LAN VPNs.
The last exercise I practiced was to create a LAN-to-LAN VPN between two Pfsense firewalls, by using IPSEC protocols.
I succeeded, with both firewalls in the same network. But I'm wondering if it's possible to do the same thing, with 2 Pfsense firewalls...
|
by: adsilva |
last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
| | |
by: muto222 |
last post by:
How can i add a mobile payment intergratation into php mysql website.
| |
