asmith Posted December 26, 2007 Share Posted December 26, 2007 does using getenv(REMOTE_ADDR) have any risk ? correct me if i wrong , i may have messed up some things together , is it just enough safe to get user ip address with this function and that's all ? or it may make some possibility and chance to crack the script or something? Link to comment https://forums.phpfreaks.com/topic/83255-solved-getenvremote_addr/ Share on other sites More sharing options...
OOP Posted December 26, 2007 Share Posted December 26, 2007 Hi there, I don't know if every one agrees with me but you should consider this as an input to your script and you should always validate and filter inputs. Regards Link to comment https://forums.phpfreaks.com/topic/83255-solved-getenvremote_addr/#findComment-423536 Share on other sites More sharing options...
Orio Posted December 26, 2007 Share Posted December 26, 2007 As far as I know (and according to what I can find on the web), you can trust getenv(REMOTE_ADDR) (or $_SERVER['REMOTE_ADDR']). But you shouldn't trust $_SERVER['X-Forwarded-For'] or $_SERVER['HTTP_USER_AGENT'] since they can be easily faked. But what OOP said can't hurt anyone Orio. Link to comment https://forums.phpfreaks.com/topic/83255-solved-getenvremote_addr/#findComment-423578 Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.