From a9425e4f33c1220ef4e0d2c19d1ee74547ed2ac2 Mon Sep 17 00:00:00 2001 From: "Paul S. Owen" Date: Mon, 24 Mar 2003 19:03:32 +0000 Subject: [PATCH] Add browser validation git-svn-id: file:///svn/phpbb/trunk@3710 89ea8834-ac86-4346-8a33-228a782c2dd0 --- phpBB/includes/session.php | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/phpBB/includes/session.php b/phpBB/includes/session.php index 1a545dbf34..244cfd38c9 100644 --- a/phpBB/includes/session.php +++ b/phpBB/includes/session.php @@ -97,7 +97,10 @@ class session $s_ip = implode('.', array_slice(explode('.', $this->data['session_ip']), 0, $config['ip_check'])); $u_ip = implode('.', array_slice(explode('.', $this->ip), 0, $config['ip_check'])); - if ($u_ip == $s_ip) + $s_browser = ($config['browser_check']) ? $this->data['session_browser'] : ''; + $u_browser = ($config['browser_check']) ? $this->browser : ''; + + if ($u_ip == $s_ip && $s_browser == $u_browser) { // Only update session DB a minute or so after last update or if page changes if (($current_time - $this->data['session_time'] > 60 || $this->data['session_page'] != $this->page) && $update)