note 15163 deleted from function.session-id by jimw
| From: | jimw@php.net | Date: | Wed, 02 Jan 2002 11:35:56 +0000 |
| Subject: | note 15163 deleted from function.session-id by jimw | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-24224@lists.php.net to get a copy of this message | ||
In response to the use of $REMOTE_ADDR in the session ID.
REMOTE_ADDR will more than often be the IP of the visitors proxy server, not their real IP address,
so it's probably not so wise to use it as a unique identifier.
See also $HTTP_X_FORWARDED_FOR.