Merge https://github.com/friendica/friendica into pull

[friendica.git] / include / auth.php

diff --git a/include/auth.php b/include/auth.php
index b87662fea29f55944d5744768ba09d87705ca070..cba6a67a7fd7ec5124b919540bc3b6bf118013cc 100644 (file)
--- a/include/auth.php
+++ b/include/auth.php
@@ -53,6 +53,8 @@ if((isset($_SESSION)) && (x($_SESSION,'authenticated')) && ((! (x($_POST,'auth-p
                $check = get_config('system','paranoia');
                // extra paranoia - if the IP changed, log them out
                if($check && ($_SESSION['addr'] != $_SERVER['REMOTE_ADDR'])) {
+                       logger('Session address changed. Paranoid setting in effect, blocking session. ' 
+                               . $_SESSION['addr'] . ' != ' . $_SERVER['REMOTE_ADDR']);
                        nuke_session();
                        goaway(z_root());
                }