Make SemanticScuttle safe against spam attacks
Brought to you by:
cweiske
Currently, Scuttle and SemanticScuttle is very vulnerable to spamming attacks.
Part of the problem is the easy registration. Solutions could be:
- Implement a better user verification system (Double-Opt-in)
- Make registered user inactive at first and and provide an admin system to activate them
- An config option to disable mass imports of bookmarks
- A verification flag for new bookmarks (admin approval). This could already be solved with the voting system in combination with the threshold
The quickform branch already contains a better login captcha.
Ticket moved from /p/semanticscuttle/feature-requests/2/