Prevent spam posts

[sethetter]

A job can be posted with a fake or unowned email. It also posts as soon as submitted with no verification.

The email that goes out should include a verification link that must be pressed before the job is visible and posted to slack.

[sethetter]

Idea: to ease this friction for users who've posted jobs before, maybe we only require this verification step if the specific email has not been verified previously.

[jameskupke]

I was taking a look, would it make sense to change the flow where we add a column to the postings (i.e. Verified) that is marked as false on submission? You can add the filter in the job board until it gets verified.

The user gets an email with the edit button, and when they click on Edit, we can then flag the verify button there to allow it to display.

I think that would require the least amount of changes. It still will send an email to a potentially scam email address, which was why I was initially considering adding a captcha.

[sethetter]

@jameskupke bingo! That’s pretty much exactly the implementation plan I had in mind as well haha.

Use the existing email. Add a verified column. Add a route to handle the verification. Filter jobs unless they’re verified. And let the cleanup process delete them after 30 days from submission just as it normally does.