Re: IP security check
| From: | Richard Lynch | Date: | Thu, 09 Aug 2001 20:57:37 +0000 |
| Subject: | Re: IP security check | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-62077@lists.php.net to get a copy of this message | ||
> For secure payment pages, I need for the code to determine the persons IP
> address, even if they have a "spoofer" running. Is this possible? Getting
> around the spoofer in order to catch criminals using illegal credit card
> #'s..
In addition to $REMOTE_ADDR, some firewalls provide an $X-Forwarded-For (or
similar) header, if their goal is not to mask IPs in the first place. Might
be worth recording those.
Bottom line, though, is that somebody that really wants to spoof their IP
address, you'll never be able to back-track them.
--
WARNING richard@zend.com address is an endangered species -- Use
ceo@l-i-e.com
Wanna help me out? Like Music? Buy a CD: http://l-i-e.com/artists.htm
Volunteer a little time: http://chatmusic.com/volunteer.htm