Option to disable IP check for sessions

Version 1.231

Feature
Finished

By default, the IP will be checked for each request to ensure that the caller is who he says he is. For some clients, their IP is changed between requests, preventing them from using DA. This feature will allow a server admin to disable the IP check for sessions. Note that this is less secure, and you should be very cautious if you decide to use it. Make sure that the sessions directory is not readable by anyone but the "diradmin" user or else anyone on the server would be able to read the session file and pass it as a cookie essentially logging them in as that user. Do not enable this feature unless absolutely necessary. default: disable_ip_check=0 to enable: disable_ip_check=1 in the directadmin.conf

Interested to try DirectAdmin? Get a 30-day Free Trial!