therefore i'm not going to block them , i'm thinking to check on login if the user is using open proxy , he'll not be able to login , if not then he's welcome

whatever the authentication was , it will stay the same ... as i think blocking users with open proxies is the best way