Question

I’m new to Django but am working on the tutorial on the Django website for creating a poll.

What is the best way to make it so guests (no registration / login) can only vote once on a poll?

• IP (Don’t want IP because people sharing a network can only vote once).
• Cookie (User can delete the cookie but seems like the best approach).
• Session (If the user closes the browser the session will change).

I’m guessing that Cookie would be the best approach but is there a better way for Django?

Answer 1

There is one solution independent on the server framework you use:

Evercookie gives you virtually irrevokable cookies. Use them, if you want that level of data persistence.

Evercookie is a solution for storing data in cookies and various other places (such as memory used by Flash “cookies“, HTML5’s LocalStorage etc.). If any of these places is cleared, next visit on the site will populate it with data again. The only thing you need is the data stored in any of 13 places used by Evercookie and next visit populates it again to the other 12 places.

It is pretty hard to get rid of such cookies, so please take into account, whether your users actually agree to be tracked that way. Some of them certainly would not agree.