Node view abuse control: What exactly is a "user"

The current implementation is as follows: (radioactivity_node_user_node_view())

• If the click comes from authenticated session: use session id to determine user, i.e., discard node click if that node has already received a click from that session
• If the click comes from unauthenticated session: use session id and hostname, i.e., discard node click if that node has already received a click from that session OR a click from that ip

From any clicks, session id and user ip are always recorded amongst other bookkeeping data. Sessions are determined by session cookies.

This scheme is not fool-proof in that, e.g., anonymous users behind single NATed gateway are all considered as one. However, the scheme is probably good enough when you use reasonable node click durations, e.g. 10 minutes.

If anyone comes with a better solution, hopefully non-module-specific abuse control, I'm eager to reconsider the implementation.

That sounds pretty good to me. Thanks.