I am putting together a a forum board for my web site and using MySQL as the DB. I have decide to split the DB into two; one half contains the user info with the user PW as nothing more than a hash of the user PW. For this half of the DB I am looking into verification of the user and the security behind it.
I considered using the users IP address and while I think it is a good start there are a few problems. The immediate ones seem to be that many users ISP issue dynamic addresses, the second is that an IP address is simple to spoof.
I then considered using the MAC address. This has the problem that it is easy to spoof.
What I am looking for is a method of verifying the user via bios serial number or HD serial or some such and using this with the above methods to verify a user and access rights.
My web host supports Perl and PHP but these are not my strong suites.
Would anyone be able to suggest how I might obtain this data from a users machine short of DLing a program to them?
