Re: user's ip

I would use $HTTP_SERVER_VARS["REMOTE_ADDR"] or $HTTP_SERVER_VARS["HTTP_X_FORWARDED_FOR"] to return the IP address.. I have seen, people using if($ip == $REMOTE_ADDR) { // do whatever } but in some configurations of PHP this can be a bad thing.. index.php?REMOTE_ADDR=10.0.0.1 would override the variable $REMOTE_ADDR (in SOME configurations) Its probably alot harder for a malicious user to fake the HTTP_SERVER_VARS array than just a normal variable. Just my .02c :) Regards Chris -----Original Message----- From: Renze Munnik [mailto:renze@datalink.nl] Sent: Tuesday, 7 August 2001 10:07 PM To: php-general@lists.php.net Subject: Re: [Re: [PHP] user's ip] On Tue, Aug 07, 2001 at 02:01:04PM +0200, René Moonen wrote: > The problem is that REMOTE_ADDR returns the IP address of the > proxy (if the user > accesses the web-page via a proxy. This will allways return the IP > address of > the user's machine: > > if(getenv(HTTP_X_FORWARDED_FOR)) > { > $ip=getenv(HTTP_X_FORWARDED_FOR); > } > else > { > $ip=getenv(REMOTE_ADDR); > } > $host = gethostbyaddr($ip); > Ahh.... see, that wasn't clear in the question. Yeah... that's true. Pain in the ass those proxies. They're also realy useful while testing your (dynamic) site. NOT!!! "Hey, what's this? I thought I'd realy changed that error. How's this possible?", "Didn't I just change the background-color? Why is it still the same?" BECAUSE THE DAMN PROXY DOESN'T WANT TO SHOW YOU THE NEW VERSION. No... cache, cache, cache... Damn things always come up with pages that are (way) to old! But anyway... that's not what this was about (just my own frustration). But I just don't use the proxy nomore. Only for testing things like REMOTE_ADDR etc. But thank you for specifying the question. And eh, you're right. I just didn't know the question was about this problem. -- * R&zE: -- »»»»»»»»»»»»»»»»»»»»»»»» -- Renze Munnik -- DataLink BV -- -- E: renze@datalink.nl -- W: +31 23 5326162 -- F: +31 23 5322144 -- M: +31 6 21811143 -- H: +31 23 5516190 -- -- Stationsplein 82 -- 2011 LM HAARLEM -- -- http://www.datalink.nl -- ««««««««««««««««««««««««