I've written about this before. Essentially, a lot of proxy servers are unlikely to be setting the X-Forwarded-For header, particularly web based proxies.

Edit: Thinking about it, there is a more sneaky way to detect multiple accounts, as it appears that's what you're doing. You can use the following method for that. Simply send the data back via AJAX to a PHP script.

__________________
The man who comes back through the Door in the Wall will never be quite the same as the man who went out.