> * I do not log the IP but its sha1 hash, because of privacy concerns Doesn't this provide no security though? It's trivial to hash all IPv4 addresses and compare them. Additionally, this doesn't provide any security to clients, because they can't guarantee this is in effect. makeworld