User authentification

[Anon]

I'm running PHP and MySQL on a Win98 platform with Apache 1.3xx, and would appreciate a solution for this:

How can I find out if a user logs on to my site from more than -1- location (/IP) ? Is there any method to make sure that users will not be registered as "different locations" if they are assigned a new IP from their ISP?

The script is meant to be used to validate users, and I'd like to keep track of if the user accesses his account himself or if he has given his login and password to somebody else who now has logged in.

Thanks in advance!

[damoose]

You just mentioned the problem yourself. If a user hasn´t got a static ip you can´t possibly track who he is...

In some cases the dynamic ips look like that: "---.access.nacamar.de". You could try to authenticate users by that, but in my opinion it is not as reliable as you wish it to be.....

[ame12]

Maybe back track through the server logs (if users are doing a standard browser authentication)... a server log will tell you where/when an authenticated user hit your server. Although it won't be up-to-date in real-time, it could be useful for this purpose.

Dave

===========================================
http://badblue.com/helpphp.htm
Free small footprint web server for Windows

PHP, P2P file-sharing, transcoding and more