문제

every time user login to my website I put his userID and userIP in session, and check, in every page, if session userID exist, and if userIP equal to his IP.

So If user change the ID value in the session than the IP won't be equal to his IP

if ($_SESSION['userIP'] != getenv("REMOTE_ADDR") )

My question is why. I don't remmeber why changing the userID value (inside the session) will make the userIP not being equal to his real IP ?

Thanks

올바른 솔루션이 없습니다

라이센스 : CC-BY-SA ~와 함께 속성
제휴하지 않습니다 StackOverflow
scroll top