Re: [PHP] AOL problem with remote IP address

2002-08-28 Thread Justin Garrett
AOL uses load balancing proxy servers which means every new page load could come from a different IP address. A quick google search brought up this article that mentions it: http://surfaid.dfw.ibm.com/web/home/whitepapers/weblog.html Read the section on 'Effects of Dynamically Changing IP addres

Re: [PHP] AOL problem with remote IP address

2002-08-28 Thread Justin French
on 29/08/02 1:01 PM, Joseph Szobody ([EMAIL PROTECTED]) wrote: >> But I wouldn't be relying on a remote IP for anything... they're too >> unreliable. > > This wasn't meant to be a fool-proof security solution to begin with. None of > these 'protected' pages contain anything real sensitive. Yes,

Re: [PHP] AOL problem with remote IP address

2002-08-28 Thread Joseph Szobody
> But I wouldn't be relying on a remote IP for anything... they're too > unreliable. This wasn't meant to be a fool-proof security solution to begin with. None of these 'protected' pages contain anything real sensitive. However... what are some good security procedures (besides an encrypted con

Re: [PHP] AOL problem with remote IP address

2002-08-28 Thread Justin French
I haven't heard about address' changing midway through a session (ie, without reconnecting), but it's worth pointing out that there will be a few other reasons why this isn't a good idea: 1. if they have to reconnect, they're near guaranteed to have a new IP 2. with most big ISPs, all users may

[PHP] AOL problem with remote IP address

2002-08-28 Thread Joseph Szobody
In a portion of a website, I have implemented user authentication and management using sessions. When a user first logs in, the $REMOTE_ADDR is stored is a session variable SESSION['ip']. On each of the protected pages, a header.php is included with the following code: if ($SESSION['ip'] != $R