X-Git-Url: https://git.wh0rd.org/?p=tt-rss.git;a=blobdiff_plain;f=include%2Fsessions.php;h=5584c25bdbff3fd3ea446069c2a1e60d30f9bad9;hp=b79988d987d2d033b6016694a6c9b49adb836923;hb=d246fb9fe1f18eb98037758f1b7369b34258fbf7;hpb=f8fc1ac54314dbd22c8673beb15d16780a0fc4c7 diff --git a/include/sessions.php b/include/sessions.php index b79988d9..5584c25b 100644 --- a/include/sessions.php +++ b/include/sessions.php @@ -49,15 +49,8 @@ if ($_SESSION["uid"]) { - if (!defined('_SKIP_SESSION_ADDRESS_CHECKS') || !_SKIP_SESSION_ADDRESS_CHECKS) { - if ($_SESSION["ip_address"] != $_SERVER["REMOTE_ADDR"]) { - $_SESSION["login_error_msg"] = __("Session failed to validate."); - return false; - } - } - if ($_SESSION["user_agent"] != sha1($_SERVER['HTTP_USER_AGENT'])) { - $_SESSION["login_error_msg"] = __("Session failed to validate."); + $_SESSION["login_error_msg"] = __("Session failed to validate (UA changed)."); return false; }