on this the best script i ever added to my site was a simple password tracker. basically each time a member logs in the first 2 parts of theire ip adress are recorded in a database against their name. if the script detects more than 5 differnt ips ( first 2 parts ) login in within a 24 hour period it blocked theire password, e-mails them a nice little e-mail explaining why they are blocked and how to correct it and copies me.

they can fix it upto 2 times before the account is canceled bu going to a special link that is contained in the e-mail and resetting to another password. usually they only ever have the issue one time.

simple, effective and best of all.. automatic.

before you all ask for copies ( wshich i would be happy to provide ) I have to let you know its written in asp.