Re: sessions

Unless thye proxy's IP address changes on a per-page-view basis - which it does on some large systems ... Using an IP number as any sort of identification is currently asking for hard-to-diagnose problems down the road. On 24 Oct 2002, Adam Voigt wrote: > You could, on the page where it initially creates there session, > get there IP address and make that a session variable, then in > one of your include files which is called on every page, check to > see if the current users's IP match's the one of the $_SESSION[ip] > variable, if it doesn't, just stop them dead with an exit; statement. > > Course this won't help for people behind the same public IP, but > it's a start. You could also verify against what the browser identify's > itself as, etc.