Re: Some Advice
| From: | Samuel Lopes Grigolato | Date: | Tue, 25 Jun 2013 12:40:04 +0000 |
| Subject: | Re: Some Advice | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-321488@lists.php.net to get a copy of this message | ||
Just be cautious if going to check IP, because:
1) The two users could be in the same house or cybercafé, which gives them
the same IP.
2) The user could be traveling with a wireless card, his IP would change
quite a lot in this scenario.
On Tue, Jun 25, 2013 at 9:32 AM, <php@nobswolf.info> wrote:
> You should at least check the IP of the client additionally to have some
> prove
> it is the same client you gave the session-ID.
>
> And it is better to put the session-ID in a POST-field than in GET. So it
> es very unlikely someone passes a session ID around accidently.
>
> --
> PHP General Mailing List (http://www.php.net/)
> To unsubscribe, visit: http://www.php.net/unsub.php
>
>