From 1f83e3c731bb13e51fdfbf43bff7e43b9ca1b95a Mon Sep 17 00:00:00 2001
From: BodgeMaster <>
Date: Fri, 21 Feb 2020 13:16:58 +0100
Subject: [PATCH] Well that did not work as expected. As expected.

---
 deployment-script.sh       |  2 +-
 threadr/userhome/index.php | 12 +++++++++++-
 2 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/deployment-script.sh b/deployment-script.sh
index 01465c8..9086644 100755
--- a/deployment-script.sh
+++ b/deployment-script.sh
@@ -10,7 +10,7 @@ echo "Deployment script for repository \"web-deployment\"
 =============================================================================="
 
 rewrite_code %CONTENT_DIR% "\/common\/threadr"
-rewrite_code %ENFORCE_IP% `cat enforce_ip.template`
+#rewrite_code %ENFORCE_IP% `cat enforce_ip.template`
 
 
 echo "==============================================================================
diff --git a/threadr/userhome/index.php b/threadr/userhome/index.php
index 4a6a21d..590058c 100644
--- a/threadr/userhome/index.php
+++ b/threadr/userhome/index.php
@@ -1,7 +1,17 @@
 <?php
 session_start();
 //Todo: make this a setting for users that use VPNs/Proxies and seem to jump around the world rather quickly...
-%ENFORCE_IP%
+if ($_SESSION['user_ip']!=$_SERVER['REMOTE_ADDR']){
+  // force logout
+  $_SESSION = array();
+  if (ini_get("session.use_cookies")) {
+    $params = session_get_cookie_params();
+    setcookie(session_name(), '', time() - 42000, $params["path"], $params["domain"], $params["secure"], $params["httponly"]);
+  }
+  session_destroy();
+  header("Location: https://lostcave.ddnss.de/common/threadr/login/?error=session");
+  die();
+}
 
 $pdo = new PDO('mysql:host=localhost;dbname=web', 'webstuff', 'Schei// auf Pa$$w0rter!');
 $statement = $pdo->prepare('SELECT name FROM users WHERE id = :user_id;'); // to be replaced with optional user name off the user data table