Posted by Benjamin Niemann on 05/29/07 17:55

ad@albert-dominguez.de wrote:

> On May 29, 7:12 pm, Benjamin Niemann <p...@odahoda.de> wrote:
>> wget -O - -q --referer=http://www.smart-cgi.com/api/js.js\
>> http://www.smart-cgi.com/api/rss.php?url=http://rss.news.yahoo.com/rs...
>
> Auch schon erledigt. Danke!

What has changed? I don't see a difference.
And even if - we could keep playing this game endlessly.
You have to realize that your approach suffers from the same fundamental
flaw as any other "IP protection": There is *no* way, your script could
reliably differenciate between legitimate and 'bad' requests. It only sees
a stream of incoming octets, which can be arbitrarily forged to mimic
a 'legitimate visitor'.

--
Benjamin Niemann
Email: pink at odahoda dot de
WWW: http://pink.odahoda.de/

[Back to original message]