Your method of detecting duplicate ballots is also subject to the vulnerability of false negatives if one person votes once on two different machines. There's n

Your method of detecting duplicate ballots is also subject to the vulnerability of false negatives if one person votes once on two different machines. There's no good way to protect against this. Further, useragent/IP pairs are easily bypassed by forging a false user agent string.