[drupal-devel] Seems like form validation might fail with some users

[Steve Dondley]

I just pulled these log entries from a site on my server.  The IP
changed with every single hit.  This is a very lightly trafficked site
so it's impossible many simultaneous AOL users were visiting the site.

205.188.116.5 - - [31/Oct/2005:15:52:47 -0500] "GET / HTTP/1.0" 200
4521 "-" "Mozilla/5.0 (Macintosh; U;         PPC Mac OS X; en-US;
rv:1.0.2) Gecko/20020924 AOL/7.0" 0 www.wmjwj.org

205.188.117.12 - - [31/Oct/2005:15:52:49 -0500] "GET /misc/drupal.css
HTTP/1.0" 200 9377 "http://wmjwj.or        g/" "Mozilla/5.0
(Macintosh; U; PPC Mac OS X; en-US; rv:1.0.2) Gecko/20020924 AOL/7.0"
0 www.wmjwj.org

205.188.116.68 - - [31/Oct/2005:15:52:50 -0500] "GET
/sites/wmjwj.org/modules/event/event.js HTTP/1.0" 20        0 717
"http://wmjwj.org/" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-US;
rv:1.0.2) Gecko/20020924 AOL/7        .0" 0 www.wmjwj.org

205.188.116.72 - - [31/Oct/2005:15:52:50 -0500] "GET
/sites/wmjwj.org/modules/event/event.css HTTP/1.0" 2        00 5382
"http://wmjwj.org/" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-US;
rv:1.0.2) Gecko/20020924 AOL        /7.0" 0 www.wmjwj.org

205.188.116.7 - - [31/Oct/2005:15:52:51 -0500] "GET
/sites/wmjwj.org/themes/bluemarine_custom/style.css H        TTP/1.0"
200 6006 "http://wmjwj.org/" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X;
en-US; rv:1.0.2) Gecko/20        020924 AOL/7.0" 0 www.wmjwj.org

205.188.117.71 - - [31/Oct/2005:15:52:52 -0500] "GET
/misc/menu-leaf.png HTTP/1.0" 200 108 "http://wmjwj.        org/"
"Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-US; rv:1.0.2)
Gecko/20020924 AOL/7.0" 0 www.wmjwj.org

205.188.116.72 - - [31/Oct/2005:15:52:52 -0500] "GET
/misc/menu-collapsed.png HTTP/1.1" 200 108 "http://w        mjwj.org/"
"Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-US; rv:1.0.2)
Gecko/20020924 AOL/7.0" 0 www.wmjwj        .org

205.188.116.13 - - [31/Oct/2005:15:52:52 -0500] "GET
/sites/wmjwj.org/files/logo.jpg HTTP/1.0" 200 32875        
"http://wmjwj.org/" "Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en-US;
rv:1.0.2) Gecko/20020924 AOL/7.0" 0         www.wmjwj.org


On 11/6/05, neil at civicspacelabs.org <neil at civicspacelabs.org> wrote:
> On Sun, Nov 06, 2005 at 01:54:20PM -0500, Steve Dondley wrote:
> > Some ISP's, like AOL, change a user's IP address from one page view to
> > the next.  It seems like this might cause a problem for the new forms
> > API which uses the IP address to create a token used to validate a
> > form.  The IP address collected from the user when used the form gets
> > loaded could be different from the IP address seen when submitting it.
>
> I used AOL two years ago and I had a consistent IP throughout each
> session. And if inconsistent IPs do happen (as they did in my office a
> few months ago) the session handling gets very confused.
>
> -Neil
>


--
Dondley Communications
http://www.dondleycommunications.com

Communicate or Die: American Labor Unions and the Internet
http://www.communicateordie.com