CODEWITHSUNDEEP
javahttp
newbie
newbie

Reputation: 24645

Identifying user by browser agent details?

I understand that this kind of identification cannot be 100% accurate, but example usage would be internet poll, to detect users that have already voted. Is user detection possible with browser sent details? And what kind of information I can get from browser with every request? If I add IP address or location for example town to this, then identification would be more accurate. Are there any possible downsides I should know about?

Upvotes: 1

Views: 217

Answers (3)

Johan Bezem
Johan Bezem

Reputation: 2595

You may want to check out the research the EFF has conducted, to identify visitors using default browser-transported information - but no cookies. Here's the link for Panopticlick.

Upvotes: 1

Simeon
Simeon

Reputation: 7790

You should not rely on such information.

As I'm sure you are aware all of this information can be easily forged. As you can specify any request header at will (the request header contains IP, location, browser etc.).

You can use it as a poll, but you should keep in mind that the poll will never be 100% accurate.

If you want to know where the user is from make him authenticate in the site with a valid e-mail and set a cookie on his browser.

Another way to check a user's identity/location is using a paid identity validation service like URU for instance. Even this however is never 100% accurate.

Upvotes: 1

Nakul
Nakul

Reputation: 1600

ip + location is not a good thing. Much of internet users are behind firewalls/NAT's/proxy's.

Your best best is long term persistent cookie.

Upvotes: 0

Related Questions