CGI REMOTE_ADDR, FORMS and IP Spoofing
i have e-mail form i'm trying limit abuse of.
one of things have done reduce ease of ip spoofing when submitting page form variables, forcing submitter cflocate page one-off url variable. form variables stored in struct scoped @ application level , not passed directly 2nd page, , assumption have use correct ip address first page because else there no way of knowing random url variable 2nd. url variable random , can used once.
the weird thing when i'm comparing remote_addr first page 2nd page i'm seeing mismatches on submissions appear genuine. considering it's instantenous forward first page 2nd can't think of legitimate reason why ip address change between requests
is there reasonable explanation of why happen?
one of things have done reduce ease of ip spoofing when submitting page form variables, forcing submitter cflocate page one-off url variable. form variables stored in struct scoped @ application level , not passed directly 2nd page, , assumption have use correct ip address first page because else there no way of knowing random url variable 2nd. url variable random , can used once.
the weird thing when i'm comparing remote_addr first page 2nd page i'm seeing mismatches on submissions appear genuine. considering it's instantenous forward first page 2nd can't think of legitimate reason why ip address change between requests
is there reasonable explanation of why happen?
post of code , think not working.
More discussions in Advanced Techniques
adobe
Comments
Post a Comment