could you validate their ip against one stored for a valid user? this would not prohibit someone else from using their computer, but with the addition of a user name and password, would that be effective?
-----Original Message----- From: Paul Giesenhagen [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 05, 2003 2:54 PM To: CF-Talk Subject: OT Best Practice User Validating We have a sensitive site that requires that we know WHO is on the site and that the information that have given us is valid. I know the best way to accomplish this would be to phone verify each person, but this is labor intensive and cost prohibitive. Currently our system requires that the system assigns the password and sends the password via email to the member. This is ok, but it is so easy for people to get hotmail accounts that it isn't the best way. What are some of the ways that you all have used to validate/verify a user and who they are?! Thanks for the help Paul Giesenhagen QuillDesign ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=89.70.4

