diff options
| author | marcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544> | 2008-08-31 20:00:41 +0000 |
|---|---|---|
| committer | marcus <marcus@36083f99-b078-4883-b0ff-0f9b5a30f544> | 2008-08-31 20:00:41 +0000 |
| commit | 676e87ccfae0d8a951b10145b41e13d2c5ccfe02 (patch) | |
| tree | 576c98faa955fa4293b68d08a3034002943ec4e9 /engine/lib/actions.php | |
| parent | cfcb03d40034bd9a122eac309e149d7af7b44893 (diff) | |
| download | elgg-676e87ccfae0d8a951b10145b41e13d2c5ccfe02.tar.gz elgg-676e87ccfae0d8a951b10145b41e13d2c5ccfe02.tar.bz2 | |
Some session fingerprinting code. Requires user agent to be consistent across requests.
git-svn-id: https://code.elgg.org/elgg/trunk@2047 36083f99-b078-4883-b0ff-0f9b5a30f544
Diffstat (limited to 'engine/lib/actions.php')
| -rw-r--r-- | engine/lib/actions.php | 5 |
1 files changed, 4 insertions, 1 deletions
diff --git a/engine/lib/actions.php b/engine/lib/actions.php index 28a16c403..76913f2b4 100644 --- a/engine/lib/actions.php +++ b/engine/lib/actions.php @@ -174,8 +174,11 @@ // Current session id $session_id = session_id(); + // Get user agent + $ua = $_SERVER['HTTP_USER_AGENT']; + if (($site_secret) && ($session_id)) - return md5($site_secret.$timestamp.$session_id); + return md5($site_secret.$timestamp.$session_id.$ua); return false; } |