停止帐户共享
我正在尝试找出一种方法来停止需要登录的网站上的帐户共享。为了解决这个问题，我想将其基于个人机器或 IP。我知道我可以基于 cookie（可能会被删除）或 ip（可能是动态的）。有什么我没有想到的吗？到目前为止，我想我必须将它建立在一个 cookie 的基础上，而这个 cookie 只能用 ip 来重写。
这是处理它的唯一方法还是有人可以指出我正确的方向。
I am trying to figure out a way to stop account sharing on a site that requires a login. To solve this I would want to base it on an individuals machine or ip. I know I could base this on a cookies, which could possible be deleted or an ip which could possibly be dynamic. Is there something that I am not thinking of? As of now I am thinking I would have to base it on a cookie that can only be rewritten so often with an ip.
Is this the only way to handle it or can someone point me in the right direction.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
我会花时间研究一个检测帐户共享的系统，而不是阻止。您不仅不会损害在几个位置登录的普通用户，而且还可以减少耗时，让您能够采取更准确的操作。
您可以使用您的登录/访问日志进行检测。 5 分钟内使用不同的 ip 登录超过 1 次，用于登录的 ip 来自广泛的 ISP 等。
I would spend time looking into a system detecting account sharing instead of preventing. Not only do you not harm your average user logging in on a few locations, but it's also less time consuming and let's you be able to take more accurate action.
You can use your login / visit log for detection. More then one login in 5 minutes with distinct ip(s), the ip(s) used to login are from broad ISP's etc. etc.
好吧，不要在不考虑后果的情况下阻碍您的网站。同一个人可以从工作、学校登录，ip 可能会因为动态寻址等而改变...
您可以强制每个 id 从唯一位置登录（例如，将每个登录记录在表中，其中某些字段包含唯一键，并查找插入异常）。当旧位置最近处于活动状态时从新位置登录可以设置为 (a) 在新位置失败，或 (b) 在旧位置导致失败，(c) 通知备用位置，(d) ）记录某处。此外，提供一个包含您登录位置的表格，以小字形式向用户显示，并附上政策简介，可能有助于“诚实”的人遵守规定。
Well, don't hobble your site without considering the consequences. The same person could be logging in from work, school, ips can change because of dynamic addressing, etc...
You could force each id to be logged in from a unique location (e.g. record each login in a table where certain fields comprise a unique key, and look for insertion exceptions). A login from a new location while the old location has been recently active could be set either to (a) fail at the new location, or (b) cause a failure at the old location, (c) inform the alternate location, (d) log somewhere. Also, providing a table of where you've logged in from, shown to the user in fine print, together with a blurb on the policy might aid in compliance among "honest" people.