wouldn't you need to protect against the same user registering twice? After 15 minutes or three days, its not the issue, you need to set up a proper account management system with passwords and user-names, you can verify identity with an email address not that it will stop duplicates, but its a start.