Re: Can $_SERVER['REMOTE_ADDR'] be trusted?

From: Date: Wed, 23 Feb 2005 20:06:52 +0000
Subject: Re: Can $_SERVER['REMOTE_ADDR'] be trusted?
References: 1  Groups: php.general 
Request: Send a blank email to php-general+get-209286@lists.php.net to get a copy of this message
SED wrote:
Is it possible for hackers to give a fake IP address when visiting a website running PHP? I want to allow certain IP addresses have access to a website (other IP addresses not), is it possible for someone (e.g. hacker) to give fake IP address? If so, how is the website returned to this someone? If you have any reference or links on this, please send me!
You should not rely solely on IP address, though IP spoofing is not something a script kiddie can do. You can learn more about it at http://www.securityfocus.com/infocus/1674

« previous php.general (#209286) next »