6 Nov
2005
6 Nov
'05
8:29 p.m.
I agree that this is a problem. I reported it against ecommerce sometime back, and suggested an alternative (using the session ID). http://drupal.org/node/35344 Now that this is a problem with all of Drupal (because of the new Form API?) it needs to be addressed more urgently. On 11/6/05, Steve Dondley <sdondley@gmail.com> wrote:
Some ISP's, like AOL, change a user's IP address from one page view to the next. It seems like this might cause a problem for the new forms API which uses the IP address to create a token used to validate a form. The IP address collected from the user when used the form gets loaded could be different from the IP address seen when submitting it.