[drupal-devel] Seems like form validation might fail with some users

Khalid B kb at 2bits.com
Sun Nov 6 19:29:41 UTC 2005


I agree that this is a  problem.

I reported it against ecommerce sometime back, and suggested an
alternative (using the session ID).

http://drupal.org/node/35344

Now that this is a problem with all of Drupal (because of the new Form
API?) it needs to be addressed more urgently.

On 11/6/05, Steve Dondley <sdondley at gmail.com> wrote:
> Some ISP's, like AOL, change a user's IP address from one page view to
> the next.  It seems like this might cause a problem for the new forms
> API which uses the IP address to create a token used to validate a
> form.  The IP address collected from the user when used the form gets
> loaded could be different from the IP address seen when submitting it.
>



More information about the development mailing list