What is the correct way to make a confirmation email?

Hi Friends,
I have a Registration page which uses Asp.net CreateUserWizard
Control. Now I want to send a unique value(a guid) by which i can be
sure that the email address is of that user only. I will provide a
Textbox in the next step which the user has to input so that his email
address is confirmed.
Do you know how this is done with the CreateUserWizard Control?
If not the answer then any link?
Regards,
MahernozMahernoz wrote:
> Hi Friends,
>=20
> I have a Registration page which uses Asp.net CreateUserWizard
> Control. Now I want to send a unique value(a guid) by which i can be
> sure that the email address is of that user only. I will provide a
> Textbox in the next step which the user has to input so that his email
> address is confirmed.
>=20
> Do you know how this is done with the CreateUserWizard Control?
>=20
> If not the answer then any link?
>=20
> Regards,
> Mahernoz
>=20
Well, one way you could do this is to make all new user accounts=20
disabled by default. Then, upon completion of the sign-up process, an=20
e-mail with a link is sent to the user. The link points to a special=20
page whose only purpose is to change the status of the account from=20
disabled to enabled.
If you want to have another layer of security, you can randomly generate =
a number, and put that number into the DB and the e-mail. That way, only =
the person who gets that e-mail would be able to click on the link and=20
provide the number.
And upon reading your post a third time, I am also under the impression=20
that you *might* be asking about the =E2=80=9Cread image and type its con=
tents=20
into this field to validate=E2=80=9D feature found on many web sites thes=
e days.=20
If so, there is at least one publicly available CAPTCHA service on the =
net... http://www.easycfm.com/ws/ ...this service would allow you to=20
provide the user with an image that contains a code, and that they would =
have to put the code into another field and have it verified before they =
could be validated.
In the end, a mix of all three methods would be the most secure, but=20
also the most annoying to end users. The first one is probably the most=20
accessible, and the last is probably the most convenient.
I hope this helps.
=2E..Geshel
--=20
****************************************
*****************************
My return e-mail address is an automatically monitored spam honeypot.
Do not send e-mail there unless you wish to be reported as a spammer.
Please send all e-mail to my first name at my last name dot org, with
a subject-line of =E2=80=9CNEWSGROUP REPLY FOR NEO GESHEL=E2=80=9D (all u=
ppercase).
****************************************
*****************************