I am using vb-cgi to develop web ap.
BUT find no good ways to identify clients.
(to identify who is connecting now)

Several ways to do this:
(1)cookie
(2)ip
(3)session variables in ASP
(4)generate an unique key

ways (1)(2) are not good ...
(1)cookie can be disabled in client
(2)client maybe access via proxy

way(4) is not very smart

Only session variables could be good one, but
only be used in ASP.

Who get better idea besides session variables?

Thanks very much.