How to implement authorization with cookies and binding by ip?

Question

PHP

I know how to implement normal authorization with cookies and ip, but how to save authorization in the case of a dynamic ip, I tried to analyze many examples, often I noticed ip binding in cookies. I have no idea how to implement this with a dynamic ip ... Help me figure it out

Answer 1

So do you want to bind to IP or not to bind? Decide.
If not, do not check the IP for a match, what's the problem?

Answer 2

It is unlikely that this is possible with the conditions that you described. An IP address is generally not a constant thing. A person can work with your site both from a phone via 3G / 4G and from a desktop. Don't bind it to an IP.

Answer 3

As an option, I advise you to write a unique cookie to the browser + save the md5 User Agent in the database in case the cookie is stolen. When logging in, check if the cookie and the User Agent match. It won't work with dynamic IPs.

Answer 4

I recommend implementing the algorithm described in the article jaspan.com/improved_persistent_login_cookie_best_p...