On Mon, Dec 28, 2009 at 2:34 PM, D. Richard Hipp <[email protected]> wrote:
> Changing Fossil so that anonymous logins do not track IP address might > be one solution - but it will only work for anonymous. Regular users > also have the IP address as part of their login and the same problem > applies to them. But with a regular user, removing the IP address > from the login cookie opens up the protocol to packet sniffing > attacks, IIRC. > > I'll see what I can do... > It might make sense to look at (or copy) how PHP handles this, as PHP's session support is quite good. -- ----- stephan beal http://wanderinghorse.net/home/stephan/
_______________________________________________ fossil-users mailing list [email protected] http://lists.fossil-scm.org:8080/cgi-bin/mailman/listinfo/fossil-users
