Spam/Abuse , Worldpay/Credit -Cards, Advise needed

[samn01]

Hi all.

As always I am relying on the all-knowing oracle that is PH for my answers.

I am currently working on a web project that will allow users/members to message each other indirectly.
I will store the messages and recipients will be told to log on and check their messages. What I want to protect against is Spam and abuse of the system I.E people slaging off other members etc.

My thought was to ask everyone that signs up for his or her CC details. I believe worldpay does that when you join?
I am considering asking each member to sign up with Worldpay (despite there problems today) even though I do not plan to charge him or her anything.

Would having to register your CC details put you off joining a web-based group/forum/site?

Is there a better way to store CC details / avoid abuse.
The messages will make up the main part of the site and I am expecting many thousands per day so no way to check them all manually.
Checking them automatically will slow down the site and people always find a way to get round the filter.
I.E , F**k, etc etc.

Ted I guess so must have seen your fair share of people trying to abuse the PH message facility, any advise?

Thanks all.
Sam

[davidd]

It is unlikely that people will want to give over their CC details of they are not buying anything. Also I'm not sure that WP will want you to get people to register if they are not buying owt.

It is unwise for you to store peoples CCs unless you have very strong security.

You an put filters in to stop people saying , twat, bollocks etc, etc which might be an easier way.

What about using members of the system to police it for you, like the moderators here but maybe with the Hitler power trip bit removed

D.

[PetrolTed]

You have mail

[samn01]

Thanks for the response David. I agree with you about the CC details.
Unfortunately the messages will be confidential and only read by the recipients. So the moderator idea will not work. I have also tried to build up a list of filter words to get rid of Spam in my Outlook box but I amazed at the ways people will spell Viagra to get round them V,i,a,g,r,a Viagr@, V1agra, Via,gra, v,iagra, v iagra, etc I am sure you are getting my point. If the system had to search 5 thousand messages a day for all of these words I would not stop abuse only slow up the system.

Any more ideas?

Sam

[davidd]

Is the target audience to be trusted, ie is there a membership system or is it a free for all?

As admin will you have access to the messages?

Will there be a report abuse system in place?

Is it an internal messaging system?

D.

[samn01]

Thanks Ted for the advise

David, it is a free for all. The idea incorporates a search facility and then the facility to message members. Contact details are not given so no change of addresses being harvested but I am worried people might abuse the system and send the equivalent of hate mail.

Obviously I will do the usual password validation to there email account but anyone wanting to send hate mail would just registered under a different hotmail account each time and if barred reregister under a different name. If I had another way of confirming membership details or recognising people apart from CC details it would be very helpful.

Thanks
Sam

[davidd]

samn01 said:

Thanks Ted for the advise David, it is a free for all. The idea incorporates a search facility and then the facility to message members. Contact details are not given so no change of addresses being harvested but I am worried people might abuse the system and send the equivalent of hate mail. Obviously I will do the usual password validation to there email account but anyone wanting to send hate mail would just registered under a different hotmail account each time and if barred reregister under a different name. If I had another way of confirming membership details or recognising people apart from CC details it would be very helpful. Thanks Sam

Can you check their IP address? Or shove a cookie on the machine and fore them to auto logon?

d.