logging in after ip change does not work

[anonymous]

using latestet svn,

logging in after an ip adress change, is not possible. after submitting the form the page reloads and after that im not logged in. it only works after deleting the cookie.

[jmudry]

This looks like a duplicate of #383 to me.

[sdcosta]

Fixed in [1439]. Please re-open if it is still not working.

[sfx2000@…]

Still running into problems here. Since the network I'm on is heavily subdivided, can run out of space in the record fairly quickly, and will result in some locations being able to login, where others would not.

This is when sync'ed up to changeset 1044.

Thx,

Tim

SQL result

Host: localhost

Database: rss

Generation Time: Apr 18, 2006 at 02:37 PM

Generated by: phpMyAdmin 2.6.4-pl4 / MySQL 4.1.15-Max

SQL query: SELECT * FROM users LIMIT 0, 30 ;

Rows: 1

uid 4

uname admin

password a89882c12ee9c93498608fad7103fd36

ulevel 99

realname Administrator

lastip NULL

userips 172.20.50 172.20.49 172.20.94

lastlogin 0000-00-00 00:00:00

[anonymous]

using revision 1444, login problems are there again. after clicking login it seems some chars are added to password field.

tested on FF1.5 and IE7B2...

fix it please, and dont do such crap again please, its very annoying.

[anonymous]

checked out rev 1440, it works... must be some bug in 1441 i think...

[sdcosta]

Tim, are you sure you meant changeset 1044? The userips column is of type text, so theoretically there should be no problem storing as many ips as necessary on it.

[sfx2000@…]

The 1440 and 1441 comments are not mine.

This is interesting bug though, the only way I've found to correct things is to remove the user (using the password reset plugin). This doesn't occur on all workstations, i.e. I can log into the localhost and still login to gregarius, however, from my laptop, once my IP changes, I cannot log in from it (still can from the localhost). Removing the cookie does not correct the problem.

My install is using changeset 1044.

[sfx2000@…]

Correction... 1444, too early in the morning, need my coffee :⁾

On my other rss install, not having problems. The two networks are different (one being enterprise with multiple subnets, this is the one where the problem occurs). On my home LAN, all machines are on the same subnet.

Tim

[sdcosta]

Well, we would still have to debug and see why it is not working on the network with multiple subnets, but I just thought that I would mention that I am in favour of reducing the IP check down a further level, i.e. xxx.xxx.*.* instead of xxx.xxx.xxx.*

Even when we fix this bug, we are still looking at tim having to type his password 254 times if all the subnets are used. That wouldnt be very userfriendly.

Or maybe we could have an option to turn the IP checking off.

[mbonetti]

Should be fine as of [1450] or so...