Reputation:
I'm going to be having users email something to the server, then the email will be used for something on the website.
Is the way I'm going to do it a suitable solution?
I plan on sending the users a randomly generated secret key that they email it to, something like [email protected]
. Then the server handles the incoming data.
Would this be a secure way to do so? Or is there an easier and better way? Also if it is a good way, how would I handle the secret key?
Like how would I route the emails to the certain user if my solution is suitable?
Upvotes: 0
Views: 41
Reputation: 1070
I'm unsure if I'm clear with what you're trying to do here. For what you suggest, the easiest way to handle it would be to assign that specific e-mail to a user in the process of sending it. You'd then check upon incoming e-mail whether or not that e-mail belongs to anyone, and if it does, you'd process it.
It'd be easier to provide alternatives if you explained what you were actually doing. Is this some knd of verification method? Is there a reason this cannot be handled on-site with real-time validation?
Upvotes: 1