Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Is using a User’s IP addr as part of a Cookie’s hashed value that I store in the database a bad idea? I read somewhere that since most user’s have dynamic IP addresses that it was bad practice to use this as part of the hash. If so what kind of user data should I pull in the hash? Or do I really need to?
Thanks.
While dynamic IP addresses (using DHCP) are an issue, they’re not likely to change in small timeframes. The real problem arises from the fact that some users are behind proxies that make requests from different IP addresses all the time.
It might make sense in some Intranet environments, but I believe for a public Internet facing Web site, it’s an absolute no-no.