Unique ID problem

create a long randomized 'token' . pass it in a hidden form field. or add it to your links. and yes ip address is basically meaningless - it can be easily spoofed, and for some users is 'reset' every few minutes by their network provider.