anomalizer Wrote:
-------------------------------------------------------

> Are you trying to limit genuine or malicious
> users? A malicious user can
> always circumvet the limites by creating his own
> cookies and sending
> them.

Genuine users of specific application - this why I though that session should be most reliable way. The other option
is to limit by IP but AFAIU this is not good in case several users are connecting from behind the same proxy.
Could you recommend other options?

Thanks