python - How to uniquely identify users with the same external IP address? -


i have created service login module python. want limit login. login based on failed attempts per ip address might not work , annoy users connected internet through local network since they'll have same external ip address. there way uniquely identify such users? lot!

i don't think there bulletproof solution, if users behind nat. differentiate users need private ip address, can not on ip level. if users behind nat, can see public/external ip same clients. try private ip on application level (client side), tricky (and if private address obtained via dhcp, can change between requests) other solution can think of identifying users via cookies. http response each failed login request contain cookie uniquely identifies client. in way can differentiate users same ip. have sign cookie values preserve integrity. however, not if client deletes cookies after each failed request.


Comments

Popular posts from this blog

Magento/PHP - Get phones on all members in a customer group -

php - .htaccess mod_rewrite for dynamic url which has domain names -

Website Login Issue developed in magento -