concrete5/concrete5-5.7.0 — pull request #1655 by EC-Chris (2014-12-15 23:06:56+00:00)
Title: Session fixation IP address check

I changed the session fixation test to use the IP service. It was only checking REMOTE_ADDR which would remove the protection if the server is behind a reverse proxy.