TheBlueEyz
Jan 8 2004, 06:00 AM
Grrrrr I really don't want to post this here. I prefer to post it in the Program Owners Private Folder, because of the nature of the script, and if a mod is willing, please move it there.
Before I begin, my reasoning for placing it inside the private folder is that a properly informed cheater will know how to circumvent this script's purpose and I prefer that not to happen.
No, it is not a security hole that can be fixed, because it 'depends' on the honesty of the user. The problem is that if someone were to come in here and read this, they'd know to simply lie.
Anyway.
The script modifies the signup.php page and asks for the user's birthdate. They enter the birthdate, and the script determines their age. If they are younger than 13 years old, the script will bump them out and send them to a message informing them that they're too young to signup. It also sets a cookie that will prevent them from returning.
The script employs the bump-out mechanism suggested by TRUSTe, which complies with the federal requirement of a 'good faith effort' to ensure that the Personally Identifiable Information of children is not collected.
If you wish, I can modify the script to account for people younger than 18 (if your site includes adult material), and i can also modify it if you want to require approval of parents for people 13-17 (which is actually something that SHOULD be in the script, but isn't because it really depends on how the PO wants to handle it).
If you want this script, let me know.
tobo3000
Jan 8 2004, 01:28 PM
TheBlueEyz
Jan 8 2004, 03:22 PM
Yes, that is what would happen. The reason being, there's no way the script can know if they're lying or not. Short of insisting that the only way people can sign up is through the postal mail and sending a copy of their photo id, there's no way to know that what the person enters is the truth.
It's not a permanent problem though; I will PM you another piece of information.
That or, this thread could be moved to the private forum
TheBlueEyz
Jan 9 2004, 01:52 PM
Seriously? Nobody is interested in this?
Spartaman
Jan 10 2004, 09:29 PM
I am against this (not you, just the philosophy behind it). I have been an anti-COPPA advocate for many years, and still my opinion has not changed. COPPA simply limits a child's development in the years when they need access to that kind of information and service most. A child who is given the chance to excel will most certianlly do better than one limited by COPPA. Not to mention that today's youth are much more internet-savvy than their parents. Much more (on average).
However, if one wishes to keep things perfectly legal, buy Blue's script.
edit: spelling
just_me
Jan 10 2004, 10:43 PM
Do you really think that a person who is younger than the required age would put the correct date of birth on the form?? Easiest thing in the world to add a few years to your age..................I`m at the stage where I`d like to take a few off
mvanantwerpen
Jan 10 2004, 11:15 PM
| QUOTE (just_me @ Jan 10 2004, 11:43 PM) |
| I`m at the stage where I`d like to take a few off |
LOL
TheBlueEyz
Jan 13 2004, 03:19 AM
| QUOTE (Spartaman @ Jan 10 2004, 08:29 PM) |
I am against this (not you, just the philosophy behind it). I have been an anti-COPPA advocate for many years, and still my opinion has not changed. COPPA simply limits a child's development in the years when they need access to that kind of information and service most. A child who is given the chance to excel will most certianlly do better than one limited by COPPA. Not to mention that today's youth are much more internet-savvy than their parents. Much more (on average).
However, if one wishes to keep things perfectly legal, buy Blue's script.
edit: spelling |
Actually I understand your sentiment.
My script is only intended to let sites be legal, though, outside of questions of disagreement on philosophical bases (although, I do that all the time, so... I guess I just choose my battles wisely).
By the way, the script is free, not paid, so take that into consideration..
TheBlueEyz
Jan 13 2004, 03:23 AM
| QUOTE (just_me @ Jan 10 2004, 09:43 PM) |
| Do you really think that a person who is younger than the required age would put the correct date of birth on the form?? Easiest thing in the world to add a few years to your age..................I`m at the stage where I`d like to take a few off |
That isn't the point, really..
COPPA dictates that a good faith effort be made. If they decide to scope out the site, and as a test, put in a birthdate that is below the minimum age of 13, and the site allows them to sign up, my site could be fined $11,000 just for that.
So long as something is in place to prevent that (and to prevent them from coming back and changing the date), the site is in compliance with the law.
Honestly though, some kids are still naive enough to put their real age. When the site bumps them out, they might try to go back and change their birthday, which the script won't let them do.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please
click here.