Posted by Marek Kilimajer on 02/23/05 22:06

SED wrote:
> Is it possible for hackers to give a fake IP address when visiting a website
> running PHP?
>
> I want to allow certain IP addresses have access to a website (other IP
> addresses not), is it possible for someone (e.g. hacker) to give fake IP
> address? If so, how is the website returned to this someone?
>
> If you have any reference or links on this, please send me!


You should not rely solely on IP address, though IP spoofing is not
something a script kiddie can do. You can learn more about it at
http://www.securityfocus.com/infocus/1674

[Back to original message]