Agree with Jason. There's no reason to assume that anytime you detect multiple IP logins the user must be willingly sharing his account. Its quite possible that his account got hacked.
Even if you are careful you can still get hacked these days and if the hacker doesn't change the password and instead decides to share the account publicly, there's no way for a customer to know that his account has been compromised. Just look at all those cases of hacked forums reported here on WJ regularly. Do you think webmasters knowingly lets their forums get hacked? But it still happens.
That's why its better to automatically warn customers by email if multiple IP login is detected. That way the customer can take precautions.
I am not taking anyone's side here. Just trying to be fair to both parties.
Even if you are careful you can still get hacked these days and if the hacker doesn't change the password and instead decides to share the account publicly, there's no way for a customer to know that his account has been compromised. Just look at all those cases of hacked forums reported here on WJ regularly. Do you think webmasters knowingly lets their forums get hacked? But it still happens.
That's why its better to automatically warn customers by email if multiple IP login is detected. That way the customer can take precautions.
I am not taking anyone's side here. Just trying to be fair to both parties.