[drupal-devel] [feature] Bind IP to session

danielc drupal-devel at drupal.org
Sat Apr 2 00:51:32 UTC 2005

Issue status update for http://drupal.org/node/19845

 Project:      Drupal
 Version:      cvs
 Component:    base system
 Category:     feature requests
 Priority:     critical
 Assigned to:  chx
 Reported by:  chx
 Updated by:   danielc
 Status:       patch

IP's can change during a session.  So, this isn't a good idea.


Previous comments:

April 1, 2005 - 18:50 : chx

Attachment: http://drupal.org/files/issues/bindip.patch (896 bytes)

This would make session hijacking more than a bit harder. 
The code can be compacted even more, but I did not dare.

More information about the drupal-devel mailing list