RE: [PHP] vote package

2009-08-31 Thread Bob McConnell
From: Noel Butler On Fri, 2009-08-28 at 08:33 -0400, Bob McConnell wrote: Forging IP addresses is actually quite simple. VMs do it all the time when bridged to the real NIC. There are also some projects on Source Forge designed to load test HTTP servers that do similar

RE: [PHP] vote package

2009-08-28 Thread Bob McConnell
From: Ben Dunlap You might try to use the reported IP of the submitter, again unique, but that can be forged -- so again anyone can vote more than once. Can you say more about forging the reported IP? I've always been under the impression that forging the source IP in a TCP session is a

RE: [PHP] vote package

2009-08-28 Thread Noel Butler
On Fri, 2009-08-28 at 08:33 -0400, Bob McConnell wrote: Forging IP addresses is actually quite simple. VMs do it all the time when bridged to the real NIC. There are also some projects on Source Forge designed to load test HTTP servers that do similar things. I have an application I wrote

Re: [PHP] vote package

2009-08-27 Thread tedd
At 9:52 PM +1000 8/27/09, Noel Butler wrote: Hi All, Can someone suggest a reputable vote script in php that uses mysql, doesnt need to be fancy, just have a decent reputation for not being exloited :) also tracking of users via IP to prevent ghost voting...WE are using php 5.3.0, the old one

Re: [PHP] vote package

2009-08-27 Thread tedd
At 7:18 AM +1000 8/28/09, Noel Butler wrote: On Thu, 2009-08-27 at 10:55 -0400, tedd wrote: I think you'll run into exploitation problems regardless. I'm getting that impression from the hours and hours I wasted yesterday prior to my post trying to find a good one :( There's not going to

Re: [PHP] vote package

2009-08-27 Thread Ben Dunlap
You might try to use the reported IP of the submitter, again unique, but that can be forged -- so again anyone can vote more than once. Can you say more about forging the reported IP? I've always been under the impression that forging the source IP in a TCP session is a pretty sophisticated