Posted by Peter van Schie on 11/03/05 15:33

Angelos wrote:

> I thought about it but... IP address is not the best way to do it... Because
> it changes.

True, but since it's meant to prevent automated scripts subscribing and
unsubscribing (right?) that wouldn't matter.
In case of an ISP using DHCP, the user would have to relogon to his/her
ISP to get the IP changed. So that's pretty unlikely.

> The only way I can see is something like creating an MD5 from the users id
> and then decoding it....
> Ofcourse there is no way to decode an MD5... so that's my Question :-)

Decoding md5 is impossible. But you could use the md5 hash of the id
still. In your confirm script just get the md5 hash of the id and
compare it to the md5 hash specified in the subscribers_id GET-var.

HTH.
Peter.
--
http://www.phpforums.nl

• Next in forum: Re: mysql_real_escape_string() vs addslashes()
• Prev in forum: Re: Newsletter Secure Subscribe/Unsubscribe
• Thread view: Re: Newsletter Secure Subscribe/Unsubscribe

[Reply to this message]