Especially if they come through a gateway, or use internet connection
sharing, you can't tell them apart using IP Addresses.


Warren Vail
Tools, Metrics & Quality Processes
(415) 667-7814
Pager (877) 774-9891
215 Fremont 02-658


-----Original Message-----
From: Mark Charette [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, May 14, 2002 5:30 PM
Cc: [EMAIL PROTECTED]
Subject: RE: [PHP] Sessions Without Cookies or SID Passing...


If it ain't foolproof then only a fool would use it ...

IP addresses are just about the worst way to identify anyone.

-----Original Message-----
From: Martin Towell [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, May 14, 2002 8:17 PM
To: 'Rasmus Lerdorf'; Matthew Walker
Cc: [EMAIL PROTECTED]
Subject: RE: [PHP] Sessions Without Cookies or SID Passing...


You're missing one method - using the user's IP address
It's not a guaranteed fool-proof method, but if you don't want to use
cookies or the URL, then this sorta works.



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to