|
Posted by axlq on 07/30/06 17:53
Followup to my own post. I think I have solved the problem by
forcing regeneration of the session ID if the session ID has the
value 'deleted' -- like this:
session_start();
if (session_id() == 'deleted')
session_regenerate_id(true);
As far as my tests have shown, this prevents multiple browsers
from sharing the 'sess_deleted' session file on the server, if
those browsers have a deleted session cookie and are attempting to
re-log-in to my site.
This has nothing to do with being behind a NAT.
-Alex
Navigation:
[Reply to this message]
|