3 ms·That embeds the IP in the process and could theoretically be reverse-engineered.by epi0Bauqu 16y agoThat embeds the IP in the process and could theoretically be reverse-engineered.apgwoz 16y agoAre there session ids? I assume that HMAC(secret + sessionID + ip + search terms) would be fine.epi0Bauqu 16y agoNo sessions.apgwoz 16y agoI see you do settings through a cookie or URL params. I'm out of ideas unless you hash the cookie + ip for a session ID fir that purpose.