Ion_auth - 在一個會話多個用戶

Question

我一直在使用ion_auth與笨的系統3年。突然之間的會議沒有按照他們應該做的那樣工作。

當用戶A登錄到網站，他們的會話似乎與所有其他用戶共享。因此，當用戶B導航到任何路由時，他們都會以用戶A的憑證「登錄」。

我已經用多個用戶測試了這一點，只要用戶登錄到網站，所有其他訪問該網站的用戶都會自動使用該用戶的憑證/會話登錄。

如果用戶註銷並且調用auth/logout路由，則會話不會被銷燬，所有用戶都會保持登錄該會話。

登錄後的初始重定向進入/車輛/索引。一旦你導航到任何其他頁面，檢查用戶是否登錄，你被重定向登錄。

主控制器代碼：

public function vehicle() 
{ 

    if (!$this->ion_auth->logged_in()) 
    { 
     redirect('auth/login'); 
    } 
    else { 
     if (!$this->ion_auth->is_admin()) { 

      /** 
      * 
      * User IS NOT admin 
      * 
      **/ 
      // Get User_id if standard user 
      $user = $this->ion_auth->user()->row(); 
      // Build Crud 

控制器auth.php

public function logout() 
{ 
    $this->data['title'] = "Logout"; 

    // log the user out 
    $logout = $this->ion_auth->logout(); 

    // redirect them to the login page 
    $this->session->set_flashdata('message', $this->ion_auth->messages()); 
    redirect('auth/login', 'refresh'); 
} 

服務器PHP版本30年6月5日 - 生成日期2017年2月3日7時51分58秒

笨2.2版0.1 - 版本沒有改變

Ion_Auth配置：

$config['hash_method'] = 'bcrypt'; // sha1 or bcrypt, bcrypt is 

STRONGLY recommended 
$config['default_rounds'] = 8;  // This does not apply if random_rounds is set to true 
$config['random_rounds'] = FALSE; 
$config['min_rounds']  = 5; 
$config['max_rounds']  = 9; 
$config['salt_prefix'] = version_compare(PHP_VERSION, '5.3.7', '<') ? '$2a$' : '$2y$'; 

/* 
| ------------------------------------------------------------------------- 
| Authentication options. 
| ------------------------------------------------------------------------- 
| maximum_login_attempts: This maximum is not enforced by the library, but is 
| used by $this->ion_auth->is_max_login_attempts_exceeded(). 
| The controller should check this function and act 
| appropriately. If this variable set to 0, there is no maximum. 
*/ 
$config['site_title']     = "Cars in the park";  // Site Title, example.com 
$config['admin_email']    = "nice@verynice.co.za"; // Admin Email, admin@example.com 
$config['default_group']    = 'members';   // Default group, use name 
$config['admin_group']    = 'admin';    // Default administrators group, use name 
$config['identity']     = 'email';    // A database column which is used to login with 
$config['min_password_length']  = 8;     // Minimum Required Length of Password 
$config['max_password_length']  = 20;     // Maximum Allowed Length of Password 
$config['email_activation']   = TRUE;    // Email Activation for registration 
$config['manual_activation']   = TRUE;    // Manual Activation for registration 
$config['remember_users']    = FALSE;    // Allow users to be remembered and enable auto-login 
$config['user_expire']    = 30;    // How long to remember the user (seconds). Set to zero for no expiration 
$config['user_extend_on_login']  = FALSE;    // Extend the users cookies every time they auto-login 
$config['track_login_attempts']  = TRUE;    // Track the number of failed login attempts for each user or ip. 
$config['track_login_ip_address']  = TRUE;    // Track login attempts by IP Address, if FALSE will track based on identity. (Default: TRUE) 
$config['maximum_login_attempts']  = 3;     // The maximum number of failed login attempts. 
$config['lockout_time']    = 600;     // The number of seconds to lockout an account due to exceeded attempts 
$config['forgot_password_expiration'] = 0;     // The number of milliseconds after which a forgot password request will expire. If set to 0, forgot password requests will not expire. 

會話配置：

$config['sess_cookie_name']  = 'ci_session'; 
$config['sess_expiration']  = 30; 
$config['sess_expire_on_close'] = TRUE; 
$config['sess_encrypt_cookie'] = FALSE; 
$config['sess_use_database'] = FALSE; 
$config['sess_table_name']  = 'ci_sessions'; 
$config['sess_match_ip']  = FALSE; 
$config['sess_match_useragent'] = FALSE; 
$config['sess_time_to_update'] = 30; 

會話變量（登錄的用戶。所有其他用戶在會話中的相同信息）：

stdClass Object ([id] => 1148 [ip_address] => [username] => testing [password] => $2y$08$Q4fjUfsuOKM/Q8cnQt6j0uSXP.3mCqMnzDY1nBA9RDlwm [salt] => sadsda [email] => email@email.com [activation_code] => [forgotten_password_code] => [forgotten_password_time] => [remember_code] => [created_on] => 1426181328 [last_login] => 1490008619 [active] => 1 [first_name] => Name [last_name] => Testing [company] => [phone] => [user_id] => 1148) 

Answer 1

變化配置如下設置：

$config['sess_driver'] = 'database'; 
$config['sess_save_path'] = 'ci_sessions'; 

創建表ci_sessions：

對於MySQL：

DROP TABLE IF EXISTS `ci_sessions`; 

CREATE TABLE IF NOT EXISTS `ci_sessions` (
    `id` varchar(128) NOT NULL, 
    `ip_address` varchar(45) NOT NULL, 
    `timestamp` int(10) unsigned DEFAULT 0 NOT NULL, 
    `data` blob NOT NULL, 
    KEY `ci_sessions_timestamp` (`timestamp`) 
); 

對於PostgreSQL：

CREATE TABLE "ci_sessions" (
    "id" varchar(128) NOT NULL, 
    "ip_address" varchar(45) NOT NULL, 
    "timestamp" bigint DEFAULT 0 NOT NULL, 
    "data" text DEFAULT '' NOT NULL 
); 

CREATE INDEX "ci_sessions_timestamp" ON "ci_sessions" ("timestamp"); 

使用的數據庫爲您的會話驅動

「數據庫」驅動程序用來存儲會話關係數據庫如MySQL或PostgreSQL。這是許多用戶的流行選擇，因爲它允許開發人員在應用程序中輕鬆訪問會話數據 - 它只是數據庫中的另一個表。

然而，也有一些條件必須滿足：

• 只有你默認的數據庫連接（或從您的控制器訪問爲$this->db的）都可以使用。
• 您必須具有啓用查詢生成器。
• 您可以不是使用一個持續連接。
• 您可以不是使用連接與cache_on設置啓用。

來源：Codeigniter Session

Answer 2

這是一個服務器的問題（共享主機）。我將完整的應用程序移動到一個新的主機（vps主機），一切都像以前一樣工作。

更改爲DB會話Rafiq和其他評論員的建議確實有助於測試。