If you insist...
You have to identify the requester, and the only way you seem to have is the env REMOTE_ADDR.
Note that you cannot always trust this value since users behind proxies will have the same IPs.
So, on every request, instead of recreating the temp file, use append if the record for the IP is not present. Make sure you treat concurrent access to the file.
Another way is to create a file for each IP that hits your server.