affiliate links loophole

any feedback on this:

I have one question and will like to see if any feed back provides a solution to this. When you promote affiliates via code the sales from that code is tracked. If you host the affiliate link via web, forum or qr code the user will get to the page purchase the product and we are credited accordingly. The issue is once the user knows the site and decides to promote the site which won't have our affiliate code what do we do. This is the same for all affiliate programs. Have any one found a solution; this is not about trusting the affiliate is the defect by design of the affiliate code. A probable solution in our present IMEI unlock solution will be to have a field in the ordering page where the users can input a discount code; wink wink that will be the affiliate code. We promote the site and in our promotion we emphasize the discount code. The site will promote the service for $80 (or whatever price above the standard price) and with the code they get it at $40. I love affiliates I just hate the loopholes.

1) You should be dropping a cookie with the affiliate code that lasts for say 1 month. Even if the surfer returns by typing in the domain name rather than clicking an affiliate link, you can then credit the affiliate with the sale. If the surfer is already cookied and then visits another affiliate's link, then the cookie is overwritten with the new affiliate (last click gets credited for the sale).

2) Use session tracking on your server (not just cookies) to match surfers via a combination of their IP, user agent etc. If someone who you can reliably identify as being the same person comes back via a typein and buys something, you can credit the affiliate.

Most modern off-the-shelf affiliate platforms already have these built in.

This is a good approach besides using redirects and cloaking Technics which includes unicode url encoding which hides all text or like the cpa redirector which work nice but if the person gets a hole of the url they already know the source and future sales are bypassing your affiliate code if the same machine is not used from my perspective. Thx for the reply

Thanks for the feedback much love; this method is the best for what I asked. meta http-equiv="Refresh

Here's a sample using simple html that redirects to an html and the destination is cloaked with unicode. Same method could be use for the httaccess process. Thanks for the feedback and keeping the answer to your self. Is a greedy world out there I know. I like to share.

QR codes are an issue because they use that on phone, then later on PC go directly to the site.