[drupal-devel] [feature] Bind IP to session

[danielc]

Issue status update for http://drupal.org/node/19845

 Project:      Drupal
 Version:      cvs
 Component:    base system
 Category:     feature requests
 Priority:     critical
 Assigned to:  chx
 Reported by:  chx
 Updated by:   danielc
 Status:       patch

IP's can change during a session.  So, this isn't a good idea.


danielc



Previous comments:
------------------------------------------------------------------------

April 1, 2005 - 18:50 : chx

Attachment: http://drupal.org/files/issues/bindip.patch (896 bytes)

This would make session hijacking more than a bit harder. 
The code can be compacted even more, but I did not dare.