> I'm experimenting with the use of CFHTTP and CFHTTPPARAMS to
> log in to a large, unaffiliated web site I frequently use
> and which requires username/password.
>
> It appears the other site uses an IP check of some kind,
> because it throws a vague error message that reports what
> my IP no. is (and blocks access). No doubt they've instituted
> this IP checking for security reasons.
>
> Without breaching the bounds of ethics, I'm wondering if
> there's any workaround...
Given that IP spoofing would breach the bounds of ethics, your only option
would be to get your server's IP added to their checklist, if you're correct
about your suspicion.
However, if it's an "unaffiliated" web site, how does it know what your IP
address should be? That is, if it lets you connect from your workstation,
does it allow you to connect via a browser from another desktop? I wouldn't
be surprised if, instead of it being an IP address issue, it just doesn't
recognize your "browser" when you use CFHTTP.
By default, CFHTTP describes itself to the target server as "ColdFusion". It
might be the case that the server is looking for a well-known browser type
like Netscape or IE. You can have CFHTTP tell the server it is one of those,
and see what happens. In CF 4.5.x, you can add a USERAGENT attribute; in
earlier versions, you'll have to add a CFHTTPPARAM tag, which might look
like this:
<CFHTTPPARAM TYPE="CGI" NAME="USER_AGENT" VALUE="Mozilla/4.0 (compatible;
MSIE 5.01; Windows NT 5.0)">
Note that the "HTTP_" prefix, as you'd see in the debug output, has been
omitted. The server will add that for any CGI data coming from the browser.
Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444
------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
