Option to disable IP check for sessions

Version Number 1.231
Finished Yes
Type feature

By default, the IP will be checked for each request to ensure that the caller is who he says he is.

For some clients, their IP is changed between requests, preventing them from using DA.

This feature will allow a server admin to disable the IP check for sessions.

Note that this is less secure, and you should be very cautious if you decide to use it. Make sure that the sessions directory is not readable by anyone but the “diradmin” user or else anyone on the server would be able to read the session file and pass it as a cookie essentially logging them in as that user.

Do not enable this feature unless absolutely necessary.

default:

disable_ip_check=0

to enable:

disable_ip_check=1

in the directadmin.conf

 
ip/443.txt · Last modified: 2010/02/26 01:31 by muscardin
 
Except where otherwise noted, content on this wiki is licensed under the following license:CC Attribution-Noncommercial-Share Alike 3.0 Unported
Please visit Automatic Backlinks to start earning free backlinks Recent changes RSS feed Donate Powered by PHP Valid XHTML 1.0 Valid CSS Driven by DokuWiki