From f5e66c439e9c8881d745499243341b4095274c12 Mon Sep 17 00:00:00 2001 From: Andrew Dolgov Date: Fri, 21 Aug 2015 09:02:16 +0300 Subject: remove SESSION_CHECK_ADDRESS --- include/sessions.php | 29 ----------------------------- 1 file changed, 29 deletions(-) (limited to 'include/sessions.php') diff --git a/include/sessions.php b/include/sessions.php index 30d502641..c0ec64c3d 100644 --- a/include/sessions.php +++ b/include/sessions.php @@ -39,41 +39,12 @@ function validate_session() { if (SINGLE_USER_MODE) return true; - //if (VERSION_STATIC != $_SESSION["version"]) return false; - - $check_ip = $_SESSION['ip_address']; - - switch (SESSION_CHECK_ADDRESS) { - case 0: - $check_ip = ''; - break; - case 1: - $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1); - break; - case 2: - $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')); - $check_ip = substr($check_ip, 0, strrpos($check_ip, '.')+1); - break; - }; - - if ($check_ip && strpos($_SERVER['REMOTE_ADDR'], $check_ip) !== 0) { - $_SESSION["login_error_msg"] = - __("Session failed to validate (incorrect IP)"); - return false; - } - if (isset($_SESSION["ref_schema_version"]) && $_SESSION["ref_schema_version"] != session_get_schema_version(true)) { $_SESSION["login_error_msg"] = __("Session failed to validate (schema version changed)"); return false; } - /* if (sha1($_SERVER['HTTP_USER_AGENT']) != $_SESSION["user_agent"]) { - $_SESSION["login_error_msg"] = - __("Session failed to validate (user agent changed)"); - return false; - } */ - if ($_SESSION["uid"]) { $result = Db::get()->query( "SELECT pwd_hash FROM ttrss_users WHERE id = '".$_SESSION["uid"]."'"); -- cgit v1.2.3