On: If you develop web apps, don't do this.

[eli]

I would also make each link only auto-login at most once per message (or maybe once per week across any message). You could also make the auto-login fail if any images from the message have previously been loaded from a different IP.

But there's no safe way.