Re: Re: Security Issues - Where to look?
| From: | Chris Shiflett | Date: | Thu, 10 Nov 2005 22:40:00 +0000 |
| Subject: | Re: Re: Security Issues - Where to look? | ||
| References: | 1 2 3 4 5 6 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-225574@lists.php.net to get a copy of this message | ||
GamblerZG wrote:
Read more carefully. Enforcing IP consistency is bad, and many good reasons have already been given. Please quit making the same false statements without bothering to read the responses. We're trying to help you, and if you don't want to be helped, at least stop spreading misinformation. Chris -- Chris Shiflett Brain Bulb, The PHP Consultancy http://brainbulb.com/I think it's still reasonable to restrict a session to a single IP.No, it's not, for all of the reasons Richard mentioned and more. I agree that using only IP to identify session is bad.