Is there any way of keeping track of people that contact a site? I have had problems with people writing automated scripts to abuse a JSP based service. What they basically do is to write a script that fakes a http request sequence, pretending it is a browser like IExporer or Netscape. I realise that IP identification is not possible, I can not see a way to uniquely identify a user reliably. So banning users by IP could end up shutting alot of innocent users out. Forcing users to create a user account would not be an option. The only other option would be to follow Yahoo's example and generate a JPEG with an alphanumeric code the user would have to punch in the code for verification, that would definetly defeat any script but is less convenient for the user. I would prefer to dynamically identify any individual user who uses my service more than say 10-15 times in a minute and ban him for an hour or so.
Mvh KR -- To unsubscribe, e-mail: <mailto:[EMAIL PROTECTED]> For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>
