RE: [PHP] vote package

2009-08-31 Thread Bob McConnell
From: Noel Butler > On Fri, 2009-08-28 at 08:33 -0400, Bob McConnell wrote: > > Forging IP addresses is actually quite simple. VMs do it all the time > when bridged to the real NIC. There are also some projects on Source > Forge designed to load test HTTP servers that do similar

RE: [PHP] vote package

2009-08-28 Thread Noel Butler
On Fri, 2009-08-28 at 08:33 -0400, Bob McConnell wrote: > > Forging IP addresses is actually quite simple. VMs do it all the time > when bridged to the real NIC. There are also some projects on Source > Forge designed to load test HTTP servers that do similar things. I have > an application I wr

RE: [PHP] vote package

2009-08-28 Thread Bob McConnell
From: Ben Dunlap >> You might try to use the reported IP of the submitter, again unique, but >> that can be forged -- so again anyone can vote more than once. > > Can you say more about forging the reported IP? I've always been under > the impression that forging the source IP in a TCP session is

Re: [PHP] vote package

2009-08-27 Thread Ben Dunlap
> You might try to use the reported IP of the submitter, again unique, but > that can be forged -- so again anyone can vote more than once. Can you say more about forging the reported IP? I've always been under the impression that forging the source IP in a TCP session is a pretty sophisticated op

Re: [PHP] vote package

2009-08-27 Thread tedd
At 7:18 AM +1000 8/28/09, Noel Butler wrote: On Thu, 2009-08-27 at 10:55 -0400, tedd wrote: I think you'll run into exploitation problems regardless. I'm getting that impression from the hours and hours I wasted yesterday prior to my post trying to find a good one :( There's not going to b

Re: [PHP] vote package

2009-08-27 Thread tedd
At 9:52 PM +1000 8/27/09, Noel Butler wrote: Hi All, Can someone suggest a reputable vote script in php that uses mysql, doesnt need to be fancy, just have a decent reputation for not being exloited :) also tracking of users via IP to prevent ghost voting...WE are using php 5.3.0, the old one fai

[PHP] vote package

2009-08-27 Thread Noel Butler
Hi All, Can someone suggest a reputable vote script in php that uses mysql, doesnt need to be fancy, just have a decent reputation for not being exloited :) also tracking of users via IP to prevent ghost voting...WE are using php 5.3.0, the old one fails under that, adn it had known issues so we du