kienan
/
AlternC
mirror of https://github.com/kienanstewart/AlternC.git
1
0
Fork 0
Code Issues Releases Wiki Activity

adding a variable to ignore IP in sessions, currently broken it seems

This commit is contained in:
Benjamin Sonntag 2017-06-07 15:13:25 +02:00
parent 6d72cc522b
commit ea4eea6145
2 changed files with 7 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
bureau/class/m_mem.php
View File

@ -285,7 +285,8 @@ class m_mem {
return false;
}
$db->next_record();
if ($db->f("ip")) {
if (variable_get('single_ip_desktop', '0', "Set this to 1 to enable the IP address check and unicity for an account. Prevents multiple connections to the same account and disable IP address roaming.")
&& $db->f("ip")) {
if ($db->f("me") != $db->f("ip")) {
$err->raise("mem", _("IP address incorrect, please contact the administrator"));
return false;

6
debian/changelog vendored
View File

@ -4,11 +4,15 @@ alternc (3.1.11) oldoldstable; urgency=low
* added CSRF token to all forms (as much as possible) to prevent cross-site attacks
* added XSS protection to many form fields and views
* migrated the DB abstraction layer from mysql_* functions to PDO
(necessary for security, also adds PHP7.0 compatibility)
* migrated the DB calls from addslases to prepared-queries or quotes
* fix many unix rights issues (prevents a root escalation from alterncpanel!)
* fix some little interface issues on forms
* enh adding IP address to panel logs (PR #153)
* enh adding X-Forwarded-Proto detection for SSL, not only HTTP_SSL from Apache
* enh add a variable to enable IP check in the panel (broken), disabled by default
-- Benjamin Sonntag <benjamin@sonntag.fr> Fri, 27 May 2016 10:36:00 +0200
-- Benjamin Sonntag <benjamin@sonntag.fr> Wed, 7 Jun 2017 10:36:00 +0300
alternc (3.1.10) oldoldstable; urgency=low