RE: [PHP] IP spoof

> There are no browser involved, they are Hurling. They are using > CGI/Perl scripts that > generate random Ip addresses. It is a modified version of a > password Hurler. You can You mean they're using random proxies to connect to the script. That's why my suggestion of using averages to help catch crooks...I'll admit I'm sure there are people who get past my detections but most don't as most don't think of everything...and most scriptors are lazy or script kiddies. ex. I had a person who had a good mix of faking browsers w/o javascript, browsers w/o cookies and even the http_referer code...but he always had the agent code say it was an IE 5 browser....Almost any member who can provide 100% traffic all being from one particular browser (and version) must be faking something. There'll always be ways to be automated fraud detection...but using averages will catch 95% of all would-be crooks...and there's plenty of other methods to help catch the other 5% Sincerely, Craig Vincent ------------------------- Senior Programmer Jazzmonkey Media Inc. http://www.jazzmonkey.com -------------------------