A short follow-up post showing the features that where still missing yesterday: So, CGE now supports account activation, forgotten password reset as well as general password resets. In combination with the other basic features and security measures this system should provide a stable and secure entrance point to the actual game.
- When account activation is set to TRUE, users must validate their account first by entering the activation code sent via email. eMail and Username are unique so this fights multi accounts to a certain degree. It also keeps automated bot registrations low.
- Changing passwords can be done either because a player wants to change it or the player has forgotten the password. Both use a security code that is emailed to the linked address in a similar way as the activation code. This should provide a good degree of security to this vital aspect of changing user credentials as well.
- Of course you cannot reset your account password, as long as the account is not activated. And security keys expire once used.