diff options
| author | andi <andi@splitbrain.org> | 2005-03-13 22:59:14 +0100 |
|---|---|---|
| committer | andi <andi@splitbrain.org> | 2005-03-13 22:59:14 +0100 |
| commit | 136ce04017c0b31772ce1f8474a761792b1ccecd (patch) | |
| tree | 85ef1d534f180e08d003002281fc4636e8593a16 | |
| parent | af7d064b727d27d3aaa61e6dd3523d58a5c4015d (diff) | |
| download | rpg-136ce04017c0b31772ce1f8474a761792b1ccecd.tar.gz rpg-136ce04017c0b31772ce1f8474a761792b1ccecd.tar.bz2 | |
use part of the IP address for browseruid
darcs-hash:20050313215914-9977f-bd311aad959c8d6f1486c2c45b1e6c8973d5e974.gz
| -rw-r--r-- | inc/auth.php | 9 |
1 files changed, 5 insertions, 4 deletions
diff --git a/inc/auth.php b/inc/auth.php index fdd897423..822f58f5e 100644 --- a/inc/auth.php +++ b/inc/auth.php @@ -16,7 +16,6 @@ require_once(DOKU_INC.'inc/mail.php'); // load the the auth functions require_once(DOKU_INC.'inc/auth_'.$conf['authtype'].'.php'); - require_once(DOKU_INC.'inc/acl_admin.php'); // some ACL level defines define('AUTH_NONE',0); @@ -47,7 +46,7 @@ * no further testing is done and the user is accepted * * If a cookie was found but no session info was availabe the - * blowish encrypted password from the cookie is decrypted and + * blowfish encrypted password from the cookie is decrypted and * together with username rechecked by calling this function again. * * On a successful login $_SERVER[REMOTE_USER] and $USERINFO @@ -120,10 +119,11 @@ function auth_login($user,$pass,$sticky=false){ } /** - * Builds a pseudo UID from browserdata + * Builds a pseudo UID from browser and IP data * * This is neither unique nor unfakable - still it adds some - * security + * security. Using the first part of the IP makes sure + * proxy farms like AOLs are stil okay. * * @author Andreas Gohr <andi@splitbrain.org> * @@ -135,6 +135,7 @@ function auth_browseruid(){ $uid .= $_SERVER['HTTP_ACCEPT_ENCODING']; $uid .= $_SERVER['HTTP_ACCEPT_LANGUAGE']; $uid .= $_SERVER['HTTP_ACCEPT_CHARSET']; + $uid .= substr($_SERVER['REMOTE_ADDR'],0,strpos($_SERVER['REMOTE_ADDR'],'.')); return md5($uid); } |