note 15163 added to function.session-id
| From: | php at timgriffin dot com | Date: | Thu, 30 Aug 2001 00:27:48 +0000 |
| Subject: | note 15163 added to function.session-id | ||
| Groups: | php.notes | ||
| Request: | Send a blank email to php-notes+get-17371@lists.php.net to get a copy of this message | ||
In response to the use of $REMOTE_ADDR in the session ID.
REMOTE_ADDR will more than often be the IP of the visitors proxy server, not their real IP address,
so it's probably not so wise to use it as a unique identifier.
See also $HTTP_X_FORWARDED_FOR.
http://www.php.net/manual/en/function.session-id.php