New answers tagged

3

At the end security is a just a fix like any other, its effectiveness can therefore be tested the usual way you could test any fix: Test the vulnerabilities while your security is not installed or is disabled and confirm that the environment is indeed vulnerable. Enable/apply the security system. Test again in the same conditions, and confirm that the ...


0

The reason activation links for activating a account, is timelimited, is because the resulting account is stored in database for a limited time. Lets say someone registers a account, but enters a invalid email. Now you have a inactive garbage account lingering around in the database for no apparent reason. In the cases where the link itself contain all ...


4

[1] Efficiency: Assuming you issue a new token for each link for every registration attempt, you will end up with a with a number of tokens that you have to keep track for an indefinite amount of times. For practicality terms I would suggest you set a time/date expiration period depending on the nature of your application. [2] Security: In the case of ...



Top 50 recent answers are included