Feature session ip

[Fasse]

#227 + #257

• check ip-address
• refresh auto login on every script call
• delete all auto login of user on invalid auto login id

[Fasse]

@ximex can you review the code?

[ximex]

here the params to change the length of the session_id:

ini_set('session.hash_function', '1');
ini_set('session.hash_bits_per_character', 6);

maybe we should set them. the first one should made the session more secure (better hashing algo)

Table columns with session Id should be 40 chars.

Use secure random gen for generating the auto login id. (look at passwordhasing class)

[ximex]

fixed the 35/40 chars session_id partly here: 96b7055

[ximex]

add:
* @return int Returns the organization id of this session
change:

if(is_object($this->mAutoLogin))
{
    return (int) $this->mAutoLogin->getValue('atl_org_id');
}
else
{
    return (int) $this->getValue('ses_org_id');
}

[Fasse]

done

[Fasse]

Than we can merge.