OCaml Forge

Detail: [#880] do not logout on IP change

Features: Browse | Download .csv | Monitor

[#880] do not logout on IP change

Date:
2011-01-16 20:58
Priority:
3
State:
Open
Submitted by:
ygrek (ygrek)
Assigned to:
Sylvain Le Gall (gildor-admin)
Summary:
do not logout on IP change

Detailed description
I am often using forge through tor <http://torproject.org> and have to login frequently as the server logs me out. This is usually the sign that server ties user session to IP. Is it true and is it possible to provide an option to disable such behavior?

Followup

Message
Date: 2011-01-19 14:13
Sender: Sylvain Le Gall

The PHP code indeed uses IP to store your session. Do you have an idea how to replace this IP by something else for tor ?

I think a patch can be accepted upstream if and only if we replace this IP by something else -- just removing it will lead to less secure session.

Attached Files:

Changes:

Field Old Value Date By
assigned_tonone2011-01-19 14:14gildor-admin