Changeset 2558

Timestamp:

04/16/10 11:19:46 (14 years ago)

Author:

amuller

Message:

Ticket #1041 - Arrumando validação do ip sem ser da sessão

File:

• branches/2.1/header.session.inc.php (modified) (1 diff)

branches/2.1/header.session.inc.php

@@ -6 +6 @@
 
         $sess = $_SESSION[ 'phpgw_session' ];
-        $connection_id = "{$sess['session_id']}{$sess['session_ip']}".substr($_SERVER[ 'HTTP_USER_AGENT' ],0,199);
-
+        $user_ip =  (isset($_SERVER['HTTP_X_FORWARDED_FOR']) ? $_SERVER['HTTP_X_FORWARDED_FOR'] : $_SERVER['REMOTE_ADDR']); 
+        $connection_id = "{$sess['session_id']}{$user_ip}".substr($_SERVER[ 'HTTP_USER_AGENT' ],0,199); 
 
         if (empty($_SESSION['phpgw_session']['session_id']) || ($_SESSION['connection_db_info']['user_auth'] && implode('',$_SESSION['connection_db_info']['user_auth']) !== $connection_id))