Posted by Marek Kilimajer on 02/23/05 22:06

SED wrote:
> Is it possible for hackers to give a fake IP address when visiting a website
> running PHP?
>
> I want to allow certain IP addresses have access to a website (other IP
> addresses not), is it possible for someone (e.g. hacker) to give fake IP
> address? If so, how is the website returned to this someone?
>
> If you have any reference or links on this, please send me!


You should not rely solely on IP address, though IP spoofing is not
something a script kiddie can do. You can learn more about it at
http://www.securityfocus.com/infocus/1674

• Next in thread: Re: Can $_SERVER['REMOTE_ADDR'] be trusted?
• Prev in thread: Can $_SERVER['REMOTE_ADDR'] be trusted?
• Next in forum: Re: [PHP] Problem with ftp_get and ftp_put over SSL
• Prev in forum: Re: [PHP] while loop
• Thread view: REMOTE_ADDR

[Reply to this message]