Protecting voting system.

examiz

How can I protect a voting system so the user can only vote once?

1) Cookie – the user can delete them.
2) Tracking IP address – (the user can spoof random IP) + proxy problem……

Any suggestions?

poison

hehe...
the only somewhat safe thing would be to make them register with their email adress for voting
...and sending them a activation mail =P
or an exotic one...
let them give you an /certified/ digital signature...
there aren't any other solutions ^{^...}

examiz

Registration is not an option…..

poison

there aren't any other attributes by which you can identify a client besides it's ip and a cookie you gave him
...except of course your working at an isp and he's a customer of your isp or something like that... (o_O)
that does make you desire TCPA...no ?
be happy it's still this way...
sorry

Codewarrior123

Yeah, I've run into similar problems before; there really isn't any clear way to solve it in my mind.

You might be able to use the client's MAC address, with two caveats:

1) I haven't a clue how to retrieve it for a connection.

2) It is possible (though less well known) to spoof a MAC address with some (assumedly basically all) operating systems (Windows included)

poison

if a packet travels through a router/gateway, which will happen, you can almost rely on the fact that the router replaces the source MAC with it's own...
thus..you can not rely on the MAC in any way...
regards