that's correct
i'm look at the actual IP:
if (isset($_SERVER["HTTP_X_FORWARDED_FOR"])) {
$ip = $_SERVER["HTTP_X_FORWARDED_FOR"];
} elseif (isset($_SERVER["HTTP_CLIENT_IP"])) {
$ip = $_SERVER["HTTP_CLIENT_IP"];
} else {
$ip = $_SERVER["REMOTE_ADDR"];
}
I really don't know a good way to prevent this (since on the other PC there might also be someone else).
the only thing I can think of, is to check whether someone has logged in and use that in the check as well
