recepie for a disaster ?
litwol - June 1, 2008 - 06:01
| Project: | IP Login |
| Version: | 5.x-1.0 |
| Component: | Code |
| Category: | support request |
| Priority: | normal |
| Assigned: | Unassigned |
| Status: | closed |
Jump to:
Description
What about AOL users which share the same IP? this module potentialy allows THOUSANDS of people to login as the same person.
to me that sounds like a recepie for disaster.
#1
Clearly any module, used without full understanding, can cause ill wanted results.
I think this module has a place and that with some tweaking your concern could be addressed.
In searching for some IP logging module I actually found people asking for functionality that closely resembles what litwol has so kindly offered the community.
My suggestion to this concern - Add an option for IP address verification to be used "with" the username & password. Why? This would address the "user name/password" sharing issue as discussed here http://drupal.org/node/102695
Thanks for your efforts
#2
IP Login should be used with discretion and for particular site login scenarios only.
It is designed particulary for corporate users to access a drupal site and be logged in automatically.
Before you assign an account IP Login access, you should consider who and how many users will be accessing the site from that IP address.
#3