I have someone spamming a feature on my site, but I wouldn't feel full-filled by simply banning his IP. I have a script ready to crash his browser if he visits my site again, but I don't want to get in trouble.

Don't do it right? Common sense?