Re: Passing URL parameters, how to hide

From: Date: Tue, 21 Sep 2004 14:22:32 +0000
Subject: Re: Passing URL parameters, how to hide
References: 1  Groups: php.db 
Request: Send a blank email to php-db+get-36301@lists.php.net to get a copy of this message
From: "Bastien Koert" <bastien_k@hotmail.com>
You can also validate the IP of the user for the session. Since many people are still on dialup, they do not have a static IP and therefore its of little value to store...but it should remain the same for the session.
IP addresses are pretty much worthless unless you're on an intranet where you can control them. The IP address of a user can change in the middle of a session and multiple users can have the same IP address (using proxies, for example). I wouldn't rely on them for anything. ---John Holmes...

« previous php.db (#36301) next »