Re: Session IP address matching
Hi!
> Still, that is not optimal. The desired effect is to call the session
> file something like:
>
> <session.name>_<REMOTE_ADDR(hash)>_<session_id>
I'm sure there's a reason why you want that, but I'm not sure I'm seeing
a generic use case for this for core. Why would most of the core users
care how the session files are named and require them named in a
specific way?
If you want to limit access to sessions to specific IPs only, there
already is an easy way to do it, by overriding SessionHandler. If you
want to make sessions stick to IP, there's also pretty easy way to do it
too. So I wonder - why change the core if it can already easily be done
with what we have?
--
Stanislav Malyshev, Software Architect
SugarCRM: http://www.sugarcrm.com/
(408)454-6900 ext. 227
Thread (29 messages)