Changeset 2910 for trunk/header.session.inc.php

Timestamp:

06/09/10 11:25:39 (14 years ago)

Author:

niltonneto

Message:

Ticket #1041 - Reativada configuração "Verificar endereço IP de todas sessões".

File:

• trunk/header.session.inc.php (modified) (2 diffs)

trunk/header.session.inc.php

@@ -19 +19 @@
         $user_agent = array();
         if (isset($GLOBALS['phpgw']) && !isset($_SESSION['connection_db_info'])){
+                $_SESSION['phpgw_info']['admin']['server']['sessions_checkip'] = $GLOBALS['phpgw_info']['server']['sessions_checkip'];
                 if($GLOBALS['phpgw_info']['server']['use_https'] == 1) {
                 $new_ip = (isset($_SERVER['HTTP_X_FORWARDED_FOR']) ? $_SERVER['HTTP_X_FORWARDED_FOR']."," : ""). $_SERVER['REMOTE_ADDR'];
                 $GLOBALS['phpgw']->db->query("UPDATE phpgw_access_log SET ip='$new_ip' WHERE account_id <> 0 and lo = 0 and sessionid='{$GLOBALS['sessionid']}'",__LINE__,__FILE__);
                 }
-                $GLOBALS['phpgw']->db->query("select trim(sessionid), ip, browser from phpgw_access_log where account_id <> 0 and lo = 0 and sessionid='{$GLOBALS['sessionid']}' limit 1",__LINE__,__FILE__);
+                $GLOBALS['phpgw']->db->query("select trim(sessionid),".($_SESSION['phpgw_info']['admin']['server']['sessions_checkip'] ? "ip," : "")."browser from phpgw_access_log where account_id <> 0 and lo = 0 and sessionid='{$GLOBALS['sessionid']}' limit 1",__LINE__,__FILE__);
                 $GLOBALS['phpgw']->db->next_record();
                 if($GLOBALS['phpgw']->db->row( ))
@@ -32 +33 @@
                 $http_user_agent = substr($_SERVER[ 'HTTP_USER_AGENT' ],0,199);
                 $user_ip = isset($_SERVER['HTTP_X_FORWARDED_FOR']) ? array($_SERVER['REMOTE_ADDR'], $_SERVER['HTTP_X_FORWARDED_FOR']) : array($_SERVER['REMOTE_ADDR']);
-                $user_agent[] = "{$sess['session_id']}{$user_ip[0]}".$http_user_agent;
+                $user_agent[] = ($_SESSION['phpgw_info']['admin']['server']['sessions_checkip'] ? "{$sess['session_id']}{$user_ip[0]}" : "{$sess['session_id']}").$http_user_agent;
                 if(count($user_ip) == 2) {
                         $user_agent[] = "{$sess['session_id']}{$user_ip[1]}".$http_user_agent;