Do not mean to alarm anyone but...

This message was sent from: Development
http://forums.oscommerce.com/viewtopic.php?p=164733#164733
----------------------------------------------------------------

I have read most of this thread due to searching for answers to my previously posted session problems.

I love the idead of security !!! 
And this post is just for information passing.

One thing to note:
many large isp's namely AO* *.0 and a lot of dailups use a bank of load ballanced servers to request info from a web site, which means the same person can show up with as many as 52 ip's.
I am not kidding when I say this I used to work for 2 of the major web tracking software companies as a high end support person and had to find and explian this stuff to the starch shirts.

Not that this IP stuff will not  affect things as long as you do not requier that the session is based on the ip ( AKA: Configuration -> sessions--> Check IP address ). BTW this is why many companies went to useing cookies instead, then the cookie scare came and they switched to sids in the url.

Lets face it nothing is perfect, but osc is on the better edge in my opinion.

Cheers to all for a good job!