3 ms·
As a first couple of notes: 1. You can gzip strings before storing them in a DB But many modern Databases/Filesystems have the built in ability to achieve the
by smanek 17y ago
As a first couple of notes:
1. You can gzip strings before storing them in a DB
But many modern Databases/Filesystems have the built in ability to achieve the same effect - but faster and more transparently.
2. Verify an email’s host address is a valid DNS record.
True, you can. But what's the point? I see two possibilities - either you want to guarantee an address is legit or you don't. If you want a guarantee this doesn't get you anything (you'll still have to send a confirmation email). If you don't care, then what's the point (someone has to type joe@aol.com instead of joe@klasjfklashf.com?). And (as a more minor concern) at sufficient scale, it could cause performance problems. I remember some webserver used to reverse-lookup IPs so it could log hostnames in its access log, and it was brought to its knees by even minimal levels of traffic).
- ErrantX 17y ago> then what's the point rudimentary "junk" detection. I've used it in the past as a basic scheme to reject certain types of bots on a PHPBB forum.
- dutchflyboy 17y ago1. I completely agree. 2. Well, there is a point, it blocks those people who just type anything in the registration forms. But I agree that it's too easy to trick. Performance shouldn't be a problem. Only registring users need to have their email addresses checked. In your example, every page load = a dns request, which isn't a great idea. As one registration = a dns request, this load should be quite easy to handle for the webserver.
- eli 17y agoYes, it drives me nuts when people stress over picking the right regexp to "verify" email addresses. As if they're ever going to be able to detect that screw@you.com is not legit. The goal should just be to identify common typos (comma instead of dot). There's only one way to see if an email address is real.
- cschneid 17y agoBut there is great value in telling that new user "Hey this doesn't look like an email address, please check it before continuing". Then accept whatever they put in (because really, email addresses are stupidly complex).