stefangabos / Zebra_Session

A drop-in replacement for PHP's default session handler which stores session data in a MySQL database, providing better performance, better security and protection against session fixation and session hijacking
https://stefangabos.github.io/Zebra_Session/Zebra_Session/Zebra_Session.html
Other
172 stars 85 forks source link

Maybe a $lock_to_ip extension #7

Closed Lightwight closed 1 month ago

Lightwight commented 9 years ago

First of all: What an awesome Class. I am using it for my project and i am very satisfied with it. Next: Sorry for my bad english. I am not good at all :)

Now the idea: As in the class description described u should use $lock_to_ip with caution because of the proxie issue or dynamic IP changes which i agree. So it would be nice, if we can pass a parameter [string] to the constructor for extending the hash.

In my scenario i would do a client side fingerprint and send it back to the server (via ajax) for passing it to the ZebraSession constuctor. Then i would be able to determine the session with its client more precise. Is it possible to implement it?

stefangabos commented 1 month ago

4.1.0 fixed this