diff --git a/variable_grabbler.cfg b/variable_grabbler.cfg index 091399d..aec9af9 100644 --- a/variable_grabbler.cfg +++ b/variable_grabbler.cfg @@ -1,17 +1,4 @@ { "CONTENT_DIR":"/common/threadr", - -"NO_CHEAP_SESSION_STEALING":" -if ($_SESSION['user_ip']!=$_SERVER['REMOTE_ADDR'] || $_SESSION['user_http_user_agent']!=$_SERVER['HTTP_USER_AGENT']){ - // force logout - $_SESSION = array(); - if (ini_get(\"session.use_cookies\")) { - $params = session_get_cookie_params(); - setcookie(session_name(), '', time() - 42000, $params[\"path\"], $params[\"domain\"], $params[\"secure\"], $params[\"httponly\"]); - } - session_destroy(); - header(\"Location: https://lostcave.ddnss.de/common/threadr/login/?error=session\"); - die(); -}" - +"NO_CHEAP_SESSION_STEALING":"if ($_SESSION['user_ip']!=$_SERVER['REMOTE_ADDR'] || $_SESSION['user_http_user_agent']!=$_SERVER['HTTP_USER_AGENT']){ $_SESSION = array(); if (ini_get(\"session.use_cookies\")){ $params = session_get_cookie_params(); setcookie(session_name(), '', time() - 42000, $params[\"path\"], $params[\"domain\"], $params[\"secure\"], $params[\"httponly\"]); } session_destroy(); header(\"Location: https://lostcave.ddnss.de/common/threadr/login/?error=session\"); die();}" }