IPv6 사용시 /48 이상 변경되면 세션을 유지하지 않도록 변경 (#1767)

xpressengine · Aug 30, 2016 · 7302f22 · 7302f22
1 parent 5cf5e74
commit 7302f22
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/modules/member/member.model.php b/modules/member/member.model.php
@@ -196,8 +196,17 @@ function isLogged() {
 			{
 				return true;
 			}
+			elseif(filter_var($_SESSION['ipaddress'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV6))
+			{
+				// IPv6: require same /48
+				if(strncmp(inet_pton($_SESSION['ipaddress']), inet_pton($_SERVER['REMOTE_ADDR']), 6) == 0)
+				{
+					return true;
+				}
+			}
 			else
 			{
+				// IPv4: require same /24
 				if(ip2long($_SESSION['ipaddress']) >> 8 == ip2long($_SERVER['REMOTE_ADDR']) >> 8)
 				{
 					return true;