I can use the
system function in PHP to get the MAC address of site visitors (probably most of you know). Why do we use IP addresss to check whether someone is stealing a cookie or not?
system function have more overhead, or is it still insecure when we don't send any parameter to the function?
I know there are some situations in which users change their MAC address, but it happens less than IP address.
Could you shed some light on it?