Re[2]: [Phplib-users] store the IP in the session

[Maxim D. <max...@bo...>]

Giancarlo wrote:
G> So the idea to mark the session somehow, to prevent opening starting
G> user-chosen, unexistent id, is good.
G> The ide of the IP i'd let implement to those who want.

So, I suppose the question on IP-bound sessions is closed. We won't
bind a session to IP, because it adds a layer of complexity and does
not do what it was intended for in many cases.
However, we of course can prevent starting a new session with the
user-provided session id. I guess, a boolean marker in the session
would be enough (it reminds me of secure_auto_init and $sess->in
in Session3 ...).


-- 
Best regards,
Maxim Derkachev mailto:max...@bo...
IT manager,
Symbol-Plus Publishing Ltd.
phone: +7 (812) 324-53-53
www.books.ru, www.symbol.ru