Changeset 319 for tags/2.0.2/lib/Auth_SQL.inc.php

Timestamp:

Mar 17, 2008 11:58:08 PM (16 years ago)

Author:

quinn

Message:

 

File:

• tags/2.0.2/lib/Auth_SQL.inc.php (modified) (2 diffs)

tags/2.0.2/lib/Auth_SQL.inc.php

@@ -76 +76 @@
         // An array of IP blocks that are bypass the remote_ip comparison check. Useful for dynamic IPs or those behind proxy servers.
         'trusted_networks' => array(),
+
+        // Match the user's current remote IP against the one they logged in with.
+        'match_remote_ip' => true,
 
         // Allow user accounts to be blocked? Requires the user table to have the columns 'blocked' and 'blocked_reason'
@@ -507 +510 @@
             && strtotime($_SESSION[$this->_sess]['login_datetime']) > time() - $this->_params['login_timeout']
             && strtotime($_SESSION[$this->_sess]['last_access_datetime']) > time() - $this->_params['idle_timeout']
-            && ($_SESSION[$this->_sess]['remote_ip'] == getRemoteAddr() || $user_in_trusted_network)
+            && (!$this->_params['match_remote_ip'] || $_SESSION[$this->_sess]['remote_ip'] == getRemoteAddr() || $user_in_trusted_network)
         ) {
             // User is authenticated!