Quote:
Originally Posted by thisgeek
Here's something I'm trying - if you have access to your .htaccess, and mod_rewrite is enabled:
Completely forbid access to your /register.php unless the referrer is coming from your own site (that is, the user clicked the 'Register' link on your site). This prevents bots from directly accessing /register.php.
|
Drat. I've come up with an issue with this approach - it prevents people from activating their accounts.
I'll have a fix for it soon. Just need to somehow exclude the activation link from the redirection... I'm just having trouble with it at the moment.