Why do I have to re-login when I change IPs?

[10sun]

I am online at 3-4 different locations a day with the same laptop.

Why does this board require me to login at each location rather than just keep the cookie?

[Arlos]

That's something that got introduced when Gidan updated some of the board software to the latest versions. That's been the source of all the random re-login issues we've had over the last few weeks. He keeps finding and quashing individual instances that break it, but more seem to crop up. I'm sure he'll see this before too long and take a look at it and see if it's fixable.

-Arlos

[10sun]

I'm not terribly worried about it. The other login issue doesn't effect me at all as a result.

[Gidan]

Its part of the security what I had to rebuild most of the session files. When it sees login attempts for a new IP address it fails the authentication check and requires re-verification. If your IP changes back to the original IP before the old session expires it will still use the old session, however it is likely that the old session will expire before the IP changes again. When I get a chance I will look at the code again and see if I can loosen up the security a little in that case without endangering the security of the accounts.

[Gidan]

As long as your in the same class C subnet you should be ok now. Let me know if I need to extend that to class B or not.

[10sun]

Nope, had to login 5 times today.

I should record my IP information each time.