-----BEGIN PGP SIGNED MESSAGE----- correct - and in the case of the STATUS_URL notification, "the user" is the e-gold system :) i.e. it is the e-gold system kind of acting like a web browser hitting your cgi to notify you of payment. currently the e-gold system IPs are 63.240.230.xx - which you can check using nslookup/dig etc. check for that IP using the method below and use that result as part of your decision as to the validity of the notification. (V2_HASH check being one of the most important parts of that decision). jay w. [EMAIL PROTECTED] > hi, remote_addr will only show the ip address of the computer the > user is using and not the http referer - the refering website > (e-gold). > $IP = $ENV{'REMOTE_ADDR'}; -----BEGIN PGP SIGNATURE----- Version: PGP 7.0.4 iQEVAwUBO44uc8yM0YPqVE7FAQHW8Qf/WFaHCwFUMojgOmJ2ocBvB8Xb5/olwUF3 sdVXSbocfyHfq+NmDJtjWhUGuPloNwMauRNREdw/UtoGTSmyvQdjRw7qA8aMBUWa 58DQZnB9iWG8u7Sh98rm55dy0D7Q6kJu0n+3yDojNMQXMXM/WbFKag33zTEHZigK Hl8rAg3Xh8X1LXfbuzfIO/0YMWygO2CX4Pv/behLEiAxkSweKufG1hP4WGQJ/s6D amO5YkpWobSGgTq8QxRsA4nLr2pdc020q/7Jv9UpTTGQxUl5DgfIxgwb/K4aU3Wz dR+oM0mU3UN2iVp4Dta9rJ1CRdsSipa/4l30OK3VG4OLSfG8jdkXCQ== =XB5Y -----END PGP SIGNATURE----- --- You are currently subscribed to e-gold-tech as: archive@jab.org To unsubscribe send a blank email to [EMAIL PROTECTED]