Re: session flooding (Re: [PEAR-DEV] We need another Auth)
| From: | Tomas V.V.Cox | Date: | Mon, 10 Jun 2002 11:55:37 +0000 |
| Subject: | Re: session flooding (Re: [PEAR-DEV] We need another Auth) | ||
| References: | 1 2 | Groups: | php.pear.dev |
| Request: | Send a blank email to pear-dev+get-6855@lists.php.net to get a copy of this message | ||
"Tomas V.V.Cox" wrote:
>
> <?php
> $sid = md5($_SERVER['REMOTE_ADDR']); //take care also on proxy vars
> // if they are set
> session_id($sid);
> session_start();
> ?>
>
> So you might be forcing the same session file for all the request
> instead of 35000 different ones.
>
> Hope I'm not wrong with my thoughts.
>
Umm, well, I think I'm wrong :-). In a net with using NAT all the
clients appears with the same REMOTE_ADDR, so all they will be sharing
the same session vars which is obviously bad.
Tomas V.V.Cox