Re: [PHP] IP security check

[René Moonen]

Try this code:

if(getenv(HTTP_X_FORWARDED_FOR))
{
  $ip=getenv(HTTP_X_FORWARDED_FOR);
}
else
{
  $ip=getenv(REMOTE_ADDR);
}
$host = gethostbyaddr($ip);

And check out   http://www.php.net/manual/en/function.getenv.php

However, I think it is very unsafe to base your payment transactions on these
features. If a criminal can get credit card data, he can sure get IP
addresses also.

Regards

René


matt wrote:

 For secure payment pages, I need for the code to determine the persons IP
 address, even if they have a spoofer running. Is this possible? Getting
 around the spoofer in order to catch criminals using illegal credit card
 #'s..

 thanks
 -matt (cs student)

 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 To contact the list administrators, e-mail: [EMAIL PROTECTED]


--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] IP security check

[Tom Carter]

Another point is to remember that each page request may come from a
different IP address.

For example, where I work in IBM, every out going connection goes from one
of 30 or so boxes, each with their iwn IP, so in the process of browsing a
site each request for a file can come from one of those IP's.

- Original Message -
From: matt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, August 07, 2001 9:37 PM
Subject: [PHP] IP security check


 For secure payment pages, I need for the code to determine the persons IP
 address, even if they have a spoofer running. Is this possible? Getting
 around the spoofer in order to catch criminals using illegal credit card
 #'s..

 thanks
 -matt (cs student)



 --
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 To contact the list administrators, e-mail: [EMAIL PROTECTED]



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

[PHP] IP security check

[matt]

For secure payment pages, I need for the code to determine the persons IP
address, even if they have a spoofer running. Is this possible? Getting
around the spoofer in order to catch criminals using illegal credit card
#'s..

thanks
-matt (cs student)



-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]

Re: [PHP] IP security check

[Tyler Longren]

$REMOTE_ADDR will give you the user's IP...it can't get the un-spoofed
ip though.

Tyler Longren
Captain Jack Communications
[EMAIL PROTECTED]
www.captainjack.com



On Tue, 7 Aug 2001 15:37:09 -0500
matt [EMAIL PROTECTED] wrote:

 For secure payment pages, I need for the code to determine the persons
 IP
 address, even if they have a spoofer running. Is this possible?
 Getting
 around the spoofer in order to catch criminals using illegal credit card
 #'s..
 
 thanks
 -matt (cs student)
 
 
 
 -- 
 PHP General Mailing List (http://www.php.net/)
 To unsubscribe, e-mail: [EMAIL PROTECTED]
 For additional commands, e-mail: [EMAIL PROTECTED]
 To contact the list administrators, e-mail: [EMAIL PROTECTED]

-- 
PHP General Mailing List (http://www.php.net/)
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
To contact the list administrators, e-mail: [EMAIL PROTECTED]