跟踪匿名用户的可能解决方案
我目前正在开发一个网络应用程序，它具有一项功能，同时允许匿名用户输入（无需授权）。我意识到这可能存在安全风险，例如重复的任意输入（例如垃圾邮件）或用户发布恶意内容。因此，为了解决这个问题，我正在尝试创建一种系统来跟踪每个匿名用户发布的内容。
到目前为止，我能想到的就是通过IP进行跟踪，但由于动态IP，它似乎可能不可行，还有其他匿名用户跟踪的解决方案吗？
I'm currently developing a web application that has one feature while allows input from anonymous users (No authorization required). I realize that this may prove to have security risks such as repeated arbitrary inputs (ex. spam), or users posting malicious content. So to remedy this I'm trying to create a sort of system that keeps track of what each anonymous user has posted.
So far all I can think of is tracking by IP, but it seems as though it may not be viable due to dynamic IPs, are there any other solutions for anonymous user tracking?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（4）
我建议要求他们在发帖前或在单个 IP 地址发布异常数量的帖子后回答验证码。
这样，垃圾邮件发送者就是真正的人类。这将使消防水带减慢到可以清除任何通过的水平。
http://www.captcha.net/
I would recommend requiring them to answer a captcha before posting, or after an unusual number of posts from a single ip address.
That way the spammers are actual humans. That will slow the firehose to a level where you can weed out any that does get through.
http://www.captcha.net/
主要有两种方式：客户端和服务器端。跟踪IP是我能想到的服务器端；客户端有更准确的选项，但它们都在用户的控制之下，并且他可以重新匿名化自己（毕竟这是他的机器）：想到了 cookie 和存储。
There's two main ways: clientside and serverside. Tracking IP is all that I can think of serverside; clientside there's more accurate options, but they are all under user's control, and he can reanonymise himself (it's his machine, after all): cookies and storage come to mind.
放置一个带有 ID 的 cookie。当然，cookie 可以被删除，但这至少给了你一些东西。
Drop a cookie with an ID on it. Sure, cookies can be deleted, but this at least gives you something.
我的建议是：
My suggestion is: