Shoutbox

quote:

---

Originally posted by KeyStorm

This brings me to the question about more relyable checks to verify that the user who is identifying itself with a certain SID, really is the user the SID was generated for. But... How to handle proxy IPs? how to get a unique value from a client?

---

hash the user agent + Ip + random number you store in a cookie
that should give you a pretty unique string , the cookie is for added protection and so if two users are on the same proxy and using the same browser you can tell them apart.

edit:
If im not even talking about the right thing ignore this its pretty late at night and im going to bed , ill read it again in the morning