Forums

Disabling IP check

Permalink
I have version 5.7.5.6 and I am unable to edit the site as of recently.

My session keeps getting invalidated with the following error in the Logs

Session Invalidated. Session IP "172.xxx.xxx.xxx" did not match provided IP "162.xxx.xxx.xxx".

I disabled IP checking in config.php, I also tried to make an override in applications. Nothing worked.

Current config.php

'session' => array(
            'invalidate_on_user_agent_mismatch' => false,
            'invalidate_on_ip_mismatch' => false
        ),


If I am unable to resurrect my site I will just burn it and start again on a different platform.
 
ConcreteOwl replied on at Permalink Reply
ConcreteOwl
Your session array should be wrapped in a security array..
'security' => array(
        'session' => array(
            'invalidate_on_ip_mismatch' => false,
        ),
    ),

OR
If this is the entire contents of your application/config/concrete.php file
<?php
return array(
    'security' => array(
        'session' => array(
            'invalidate_on_ip_mismatch' => false,
        ),
    ),
);

EDIT
You posted this in the legacy 5.6 forum, it would have been better to use the 5.7+ forum..
vmajor replied on at Permalink Reply
thank you for the reply.

My code snippet was just the session array so it is inside a presumably functional config.php. how can I tell if config.php is corrupt? I ask as it seems to be ignored.

The applications override you suggested is also having no effect at all. My session is still terminated due to the IP mismatch.

Thank you for the heads up about the wrong forum. I assumed it was 5.6 --> not within 5.6 only... I will repost later unless you are able to suggest something to help me fix or diagnose the issue.

It is not browser related, or computer related, or IP origin related (original, alternative, VPN or teamviewer from another continent altogether) . I also tried disabling cloudflare. Nothing worked so far.
ConcreteOwl replied on at Permalink Reply
ConcreteOwl
I will have to check the 5.7.5.6 version in case the file is actually named config.php because as far as I am aware the file should be named concrete.php and should be located in the application/config/ directory... [ application/config/concrete.php ]
vmajor replied on at Permalink Reply
I renamed it config.php and the effect was the same. No effect. I still get booted.

I will post this in the correct forum and hope for the best.

Thank you for your replies!
vmajor replied on at Permalink Reply
My website is still broken. It is impossible to stay logged in as admin. Concrete5 also ignores the config changes or the config overrides. Logs show that I am getting booted due to IP address change.

Could the site have been hacked and something else is causing it to fail?