6 Nov
2005
6 Nov
'05
9:40 p.m.
Now that this is a problem with all of Drupal (because of the new Form API?) it needs to be addressed more urgently.
No, because of the form token patch. I wanted to introduce IP checking into session.inc (/me adjusts his security labeled tinfoil hat) but I was voted down. So, there should be no IP checking anywhere. Regards NK