makary/phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-08 04:18:52 +00:00
Code Issues Projects Releases Packages Wiki Activity

Prevent logged in user logging in again from diff IP in same sess

Browse source 
git-svn-id: file:///svn/phpbb/trunk@224 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Paul S. Owen 2001-05-02 00:32:10 +00:00
parent ccbd1cdfdd
commit 30eb41b4dd
1 changed files with 16 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

18
phpBB/includes/sessions.php
View file

@ -64,14 +64,28 @@ function session_begin($user_id, $user_ip, $page_id, $session_length, $login = F
{ {
if($user_id == ANONYMOUS) if($user_id == ANONYMOUS)
{ {
$login = 0; $login = FALSE;
$autologin = FALSE;
}
//
// Remove duplicate user_id from session table
// if IP is different ... stops same user
// logging in from different PC's at same time
// Do we want this ???
//
if( ( $login || $autologin ) && $user_id != ANONYMOUS && $user_id != DELETED )
{
$sql_delete_same_user = "DELETE FROM ".SESSIONS_TABLE."
WHERE session_user_id = '$user_id'
AND session_ip != '$int_ip'
AND session_logged_in = '1'";
$result = $db->sql_query($sql_delete_same_user);
} }
$sql_update = "UPDATE ".SESSIONS_TABLE." $sql_update = "UPDATE ".SESSIONS_TABLE."
SET session_user_id = '$user_id', session_start = '$current_time', session_time = '$current_time', session_page = '$page_id', session_logged_in = '$login' SET session_user_id = '$user_id', session_start = '$current_time', session_time = '$current_time', session_page = '$page_id', session_logged_in = '$login'
WHERE (session_id = '".$cookiedata['sessionid']."') WHERE (session_id = '".$cookiedata['sessionid']."')
AND (session_ip = '$int_ip')"; AND (session_ip = '$int_ip')";
$result = $db->sql_query($sql_update); $result = $db->sql_query($sql_update);
if(!$result || !$db->sql_affectedrows()) if(!$result || !$db->sql_affectedrows())