Quote:
Originally Posted by Gerald_D
I am rather amazed at the low interest in this problem.
|
The idea is nice, it's just the small matter of stopping password sharing being just about impossible. Why?
1- If someone logs in on a different computer to their usual one, the IP will be different, and any IP based system will think they're are somewhere who the password has been shared with, a hacker or it's a glitch.
2- Same as above except if someone logs in via a proxy server.
3- Dynamic IPs.
4- People can still share passwords and the other person use their account via the normal computer the member logs in from and both IP checks and cookie based checks would be totally useless.