Remember, HTTP is a connectionless protocol.

-- Randal L. Schwartz, Perl hacker

You could log the IP and browser string at the first connection, and subsequent connections would need to match those fields. Not foolproof, but a start.

The basic principle is that if the user didn't download the entire program, then give them another code or reinstate the same code untill the download is complete.

The point is to not let users give out the code to their friends so that the software can be pirated off the server. I realize that there is nothing to stop them from giving the software to their friends :). To bad the software isn't opensoure,or I wouldn't have this problem.

Yeah, but a token thats valid for only a limited period of time would prevent the token from spreading too far. Even if you have a one-time use token there's nothing keeing someone from copying the file they downloaded to a friend (or sharing it with gnutella, or putting in on another website as a free download, etc...). So any "piracy control" that works by limiting downloads in inherently flawed.

#!/jpsama/bin/perl -w
$tks = `mount`;
$jpsama = $! if $!;
print $jpsama;