Re: forum error
- Posted by jimcbrown (admin) Aug 31, 2009
- 886 views
jeremy said...
CoJaBo said...
As I mentioned before, IP-based authentication is a really bad idea... At the very least, there needs to be a checkbox on the login form to turn it off (IMHO, the default should be off, since noone is going to know what it means).
It's not at all IP based authentication. Once you are authenticated (by a session cookie) it compares, in addition to cookie/session based authentication the IP address.
Jeremy
Indeed. On the old forum, I was able to stay logged into the forum on two seperate computers at the same time, as long as they showed up with the same ip (via NAT).
Now, when I log into one, then check the other computer, it is logged out.