Changeset 12119 for trunk/include/functions_session.inc.php

Timestamp:

Sep 8, 2011, 8:47:30 PM (13 years ago)

Author:

rvelices

Message:

• fix protection against session hijacking for IPv4; ti be done later for ipv6

File:

• trunk/include/functions_session.inc.php (modified) (1 diff)

trunk/include/functions_session.inc.php

@@ -95 +95 @@
 function get_remote_addr_session_hash()
 {
-  $separator = (FALSE === strpos($_SERVER['REMOTE_ADDR'],'.'))
-    ? ':'
-    : '.'
-  ;
-
-  return substr(md5($_SERVER['REMOTE_ADDR']), 0, 4);
-}
+  if (strpos($_SERVER['REMOTE_ADDR'],':')===false)
+  {//ipv4
+    return vsprintf(
+      "%02X%02X",
+      explode('.',$_SERVER['REMOTE_ADDR'])
+    );
+  }
+  return ''; //ipv6 not yet
+}
+
 /**
  * this function returns