Re: Restrict access per IP Address

From: Date: Wed, 14 Feb 2001 23:22:01 +0000
Subject: Re: Restrict access per IP Address
References: 1 2  Groups: php.general 
Request: Send a blank email to php-general+get-39774@lists.php.net to get a copy of this message
be Careful using the IPAddress as a primary security measure. If the client has accessed your site through a proxy, then the IP Address shown will be the IP Address of the proxy. While you can use X_FORWARDED_FOR (or something similar,c ant remember off the top of my head :p ) to determine the requesting IP address, not all proxies support this and can be easily spoofed. IP address checking is fine as a filter, but make sure more robust methods are in place as a secondary precaution. ^^@rk << This email brought to you by RFCs 821 and 1225. >> << If I was a signature file, where would I be?? >> << if (is_function($i)) { which_one_would_i_be(); } >> Michael Stearne wrote: > > Run > <? > phpinfo(); > ?> > > on a page. You will be able to see all of the available environment variables > avaliable to you, one will tell you the client IP address. > > Michael > > "Karl J. Stubsjoen" wrote: > > > Okay, last one for the day! How do you query the clients IP address? We > > have a site in development, and I want to restrict access to people coming > > in from certain IP addresses. > > Really, all I need to do is query the IP address, I can code the rest of it. > > > > Thanks! > > > > Karl > > > > -- > > PHP General Mailing List (http://www.php.net/) > > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > > For additional commands, e-mail: php-general-help@lists.php.net > > To contact the list administrators, e-mail: php-list-admin@lists.php.net > > -- > PHP General Mailing List (http://www.php.net/) > To unsubscribe, e-mail: php-general-unsubscribe@lists.php.net > For additional commands, e-mail: php-general-help@lists.php.net > To contact the list administrators, e-mail: php-list-admin@lists.php.net --

« previous php.general (#39774) next »