remove session REMOTE_ADDR checks

master
Andrew Dolgov 6 years ago
parent f8fc1ac543
commit d246fb9fe1

@ -49,15 +49,8 @@
if ($_SESSION["uid"]) { if ($_SESSION["uid"]) {
if (!defined('_SKIP_SESSION_ADDRESS_CHECKS') || !_SKIP_SESSION_ADDRESS_CHECKS) {
if ($_SESSION["ip_address"] != $_SERVER["REMOTE_ADDR"]) {
$_SESSION["login_error_msg"] = __("Session failed to validate.");
return false;
}
}
if ($_SESSION["user_agent"] != sha1($_SERVER['HTTP_USER_AGENT'])) { if ($_SESSION["user_agent"] != sha1($_SERVER['HTTP_USER_AGENT'])) {
$_SESSION["login_error_msg"] = __("Session failed to validate."); $_SESSION["login_error_msg"] = __("Session failed to validate (UA changed).");
return false; return false;
} }

Loading…
Cancel
Save