Path: csiph.com!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From: "J.O. Aho" <user@example.net>
Newsgroups: comp.lang.php
Subject: Re: Ecommerce site - how?
Date: Mon, 26 Jun 2017 18:29:04 +0200
Lines: 48
Message-ID: <ercr2hFf9c6U1@mid.individual.net>
References: <d2223e3b-f44c-4ef7-b55a-94e012d85a95@googlegroups.com> <oiodsn$pud$1@gioia.aioe.org> <PcqdnRTWK6vXeM3EnZ2dnUU7-X3NnZ2d@posted.internetamerica> <oir89b$187l$1@gioia.aioe.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
X-Trace: individual.net IMGjGINupAxm1GMZ1VtLzgjwIpvUq3XuSr7p2GoLme0voDj0Na
Cancel-Lock: sha1:0QIRhEfZGhHZ+ocMsi4i2z6McMc=
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.2.0
In-Reply-To: <oir89b$187l$1@gioia.aioe.org>
Content-Language: en-GB
Xref: csiph.com comp.lang.php:17482

On 06/26/17 17:12, R.Wieser wrote:
> Gordon,
> 
>> Some shoppers are behind a proxy which may change the
>> outside IP address for every HTTP transaction. Thus:  1 main
>> page + 100 images = 101 differrent IP addresses.
> 
> Thats no problem at all, as long as the IP from which the webpages are
> requested does not change.

In Gordon's example it changes with each request, this could be a user
using tor network to do their shopping (which ain't wise, but that's
another story and another news group).


>> Using an IP plus the session cookie locks out a small part of
>> the user base (those behind proxies that use a changing outside
>> IP address)
> 
> I think you misunderstood when those IPs do actually change ...

I have seen corporate networks where you have multiple exit points, but
one internal proxy, depending on how the proxy is setup, for example for
load balancing the traffic, then you don't keep the same IP over a
session, the same applies for tor-network too. Also users switching from
one wifi connection to another may change IP too.


>> Some shopping carts last a lot longer than one session.  Usually
>> this requires logging in
> 
> With your described multiple different IPs within (something which the user
> percieves as) a single session that won't work either.

As long as you only relay on the session cookie, it don't matter how
many times the user changes IP as many times as they wish. The issue is
only if you look at session cookie plus IP, when those users will not be
able to finish their shopping.


<removing repost of the entire post that can already read in message
PcqdnRTWK6vXeM3EnZ2dnUU7-X3NnZ2d@posted.internetamerica as there ain't
any point in keeping anything that you don't reply to>


-- 

 //Aho