I’m building a PHP voting system, and I want to limit the number of votes per user.
So what is the best way to distinguish users on my website?
I can track them by cookies or sessions but this doesn’t seem efficient because if a user deletes his cookies he will pass the security test. I know there will not be a 100% solution but I want to follow the best practice here.
Any help?
IP address, cookies, and sessions. Try for all three of them.
There’s no sure-fire way, but those three used together are the best you’ve got.
Also, you could try email address verification as that’d throw people off, but it will also greatly decrease the likelihood that a given user will want to vote.