From 200f22e82bbea3291a197c2a0058cfc7fbb59676 Mon Sep 17 00:00:00 2001 From: plegall Date: Thu, 1 Nov 2012 09:18:03 +0000 Subject: feature 2783: ability to disable ip address in the session id git-svn-id: http://piwigo.org/svn/trunk@18850 68402e56-0260-453c-a942-63ccdbb3a9ee --- include/config_default.inc.php | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'include/config_default.inc.php') diff --git a/include/config_default.inc.php b/include/config_default.inc.php index 121221c2d..b093e2bd1 100644 --- a/include/config_default.inc.php +++ b/include/config_default.inc.php @@ -405,6 +405,10 @@ $conf['remember_me_length'] = 5184000; // session_length : time of validity for normal session, in seconds. $conf['session_length'] = 3600; +// session_use_ip_address: avoid session hijacking by using a part of the IP +// address +$conf['session_use_ip_address'] = true; + // +-----------------------------------------------------------------------+ // | debug/performance | // +-----------------------------------------------------------------------+ -- cgit v1.2.3