Newsgroups: php.internals
Path: news.php.net
Xref: news.php.net php.internals:69347
Mailing-List: contact internals-help@lists.php.net; run by ezmlm
Received-SPF: pass (pb1.pair.com: domain gmail.com designates 209.85.212.174 as permitted sender)
MIME-Version: 1.0
In-Reply-To: <CABBJUpdNr6McK6Q4qtztiYYG9CKZF7AeUdvo3YM+W0S87f8nDg@mail.gmail.com>
References: <CAGa2bXbh6dOf41nZ0r-RuRtkCuuiA=r=SnxS+A1+GgqFXPGOWQ@mail.gmail.com>
	<CABBJUpdNr6McK6Q4qtztiYYG9CKZF7AeUdvo3YM+W0S87f8nDg@mail.gmail.com>
Date: Thu, 26 Sep 2013 11:19:05 +0100
Message-ID: <CAPwsocEwM_A3YraxZmJEXjBxaGgTZhfv711801bwtHLfJfNh+Q@mail.gmail.com>
To: Laruence <laruence@php.net>
Cc: internals@lists.php.net, Yasuo Ohgaki <yohgaki@ohgaki.net>
Content-Type: multipart/alternative; boundary=f46d04447e2f1edc2704e746b3be
Subject: Re: [PHP-DEV] Regenerating session ID automatically when IP address
 has changed
From: leight@gmail.com (Leigh)

--f46d04447e2f1edc2704e746b3be
Content-Type: text/plain; charset=ISO-8859-1

On Sep 24, 2013 3:43 AM, "Laruence" <laruence@php.net> wrote:
>
> I don't think this is language concerning issue.
>
> it could be done in user script..
>
> thanks

I agree entirely with Laurence (and others). This shouldn't be a core
feature. It's not one size fits all.

There's several scenarios where a users IP changes and you don't want to
drop their session. (That doesn't mean it should simply have an option to
disable it either)

Many people still have dynamic IP addresses for their home connections, but
the group who would suffer the most would be mobile users. It's pretty
frustrating to use most sites with a phone as it is, without being kicked
off every time you switch between grps or hsdpa or whatever.

--f46d04447e2f1edc2704e746b3be--