Question

I have my little web application, with simple registration strategy – provide email and password and you are done.

Recently bot’s starting to attack my application, registering big number of users from non existent emails using the same passwords.

I want to prevent that. My idea is to extend login verification, but check the existance of email address. Do you know any web services (prefereably WCF) that could do that?

Answer 1

This is definitely not the way to solve this problem. Try one of these

1. Allow user to enter only username and send auto-generated password to their email.
2. Send a verification link to the user email and approve him/her only after verification