Re: Session IP address matching

From: Date: Sat, 25 Jan 2014 10:44:45 +0000
Subject: Re: Session IP address matching
References: 1 2 3 4 5  Groups: php.internals 
Request: Send a blank email to internals+get-71555@lists.php.net to get a copy of this message
Hi! > Still, that is not optimal. The desired effect is to call the session > file something like: > > <session.name>_<REMOTE_ADDR(hash)>_<session_id> I'm sure there's a reason why you want that, but I'm not sure I'm seeing a generic use case for this for core. Why would most of the core users care how the session files are named and require them named in a specific way? If you want to limit access to sessions to specific IPs only, there already is an easy way to do it, by overriding SessionHandler. If you want to make sessions stick to IP, there's also pretty easy way to do it too. So I wonder - why change the core if it can already easily be done with what we have? -- Stanislav Malyshev, Software Architect SugarCRM: http://www.sugarcrm.com/ (408)454-6900 ext. 227

« previous php.internals (#71555) next »