note 49924 deleted from reserved.variables by googleguy

Note Submitter: magotes[at]netcabo.pt ---- Sorry if this is old news to some, but it might not be obvious at a first glance: If you are using $_SERVER['remote_addr'] as a way to keep track of a logged-in user (this can be useful to avoid several types of hacking), remember that it might not be the user's actual IP address! I was trying to implement a login feature that used this, storing the IP into a DB. It went smoothly while on a LAN, but wrecked havoc when accepting outter connections.