On Tue, Sep 9, 2008 at 7:30 AM, Yingbo Qiu <[EMAIL PROTECTED]> wrote:
>
> I notice that webpy store http client's ip in session and using it to
> validate session. It may cause session break in http reverse-proxy
> (load-balancing) environment.
Thats probably an issue. I think it should not change anything if
ignore_change_ip is set in session config.
Does this look fine?
def _validate_ip(self):
if self.session_id and self.get('ip', None) != web.ctx.ip:
if not self._config.ignore_change_ip:
return self.expired()
--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups
"web.py" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at http://groups.google.com/group/webpy?hl=en
-~----------~----~----~----~------~----~------~--~---
