asmith Posted January 8, 2008 Share Posted January 8, 2008 i want to save user ip when register directly to mysql table . insert into table(ip) values ('$getenv(REMOTE_ADDR)') is the ip coming from the user safe enough ? i don't know whether it can be change to something harmful or not . should i validate that funcation first before inserting to sql ? Quote Link to comment Share on other sites More sharing options...
cooldude832 Posted January 8, 2008 Share Posted January 8, 2008 safe for what? You don't ban by IP cause of DDNS from ISPs Quote Link to comment Share on other sites More sharing options...
asmith Posted January 8, 2008 Author Share Posted January 8, 2008 safe for sql injection. You don't ban by IP cause of DDNS from ISPs what is DDNS ? i can't ban someone by his ip ? Quote Link to comment Share on other sites More sharing options...
cooldude832 Posted January 8, 2008 Share Posted January 8, 2008 correct you can't ban someone by their ip becuse ISPs use whats called an IP pool they own ips 123.1.1.0 to 123.1.1.195 or what ever and everytime someone connections with their system they get assigned a free IP in the pool so one day you might ban Joe Smith but the next day its Margret brown's IP Quote Link to comment Share on other sites More sharing options...
asmith Posted January 8, 2008 Author Share Posted January 8, 2008 what about giving account to each person only once? i wanted to give each IP address one site account register . now you mentioned it , and with the ones who use dynamic IP address, it will all messed up , any better idea? Quote Link to comment Share on other sites More sharing options...
cooldude832 Posted January 8, 2008 Share Posted January 8, 2008 use their email address eventually they will stop making email accounts Quote Link to comment Share on other sites More sharing options...
asmith Posted January 8, 2008 Author Share Posted January 8, 2008 the idea of IP , can work only to people with static ip address , huh? i want to ban some people , but if they could come again with another account... i know it is not that perfect, people "can" change their ip address through ip changing programs, non proxy sites ... e-mail idea is good , but i guess most of people usually have more than 1 e-mail account . so they already have chances before givin up from making e-mail addresses. Quote Link to comment Share on other sites More sharing options...
sKunKbad Posted January 8, 2008 Share Posted January 8, 2008 use their email address eventually they will stop making email accounts I don't know about that. I moderate for a forum where Russian spammers are creating accounts like crazy. I'm pretty sure they use bots for account creation, including the acquisition of new email accounts from gmail, yahoo, hotmail, etc. There are definitely some very sophisticated bots out there. Quote Link to comment Share on other sites More sharing options...
asmith Posted January 8, 2008 Author Share Posted January 8, 2008 what ip bots use ? these bots use the same ip address every time ? Quote Link to comment Share on other sites More sharing options...
cooldude832 Posted January 8, 2008 Share Posted January 8, 2008 if you find a pattern you can use regex to find people that match the pattern for hte account like person123@gmail.com you can block all personXXX@gmail.com they will eventually get bored or just report their ip to their ISP Quote Link to comment Share on other sites More sharing options...
asmith Posted January 8, 2008 Author Share Posted January 8, 2008 if someone is serious he can open up another account no matter how many limits i set for him . but i don't want to make it that much easy too . regex way ....hm thinking about it.. why people should use same pattern or something like e-mail ? Quote Link to comment Share on other sites More sharing options...
sKunKbad Posted January 8, 2008 Share Posted January 8, 2008 Unfortunately I do not have the required forum permissions to ban by IP, or do anything creative with regex. The forum is a vBulletin forum, and I'm a "SuperModerator", but its really not that super! I can only ban manually. Quote Link to comment Share on other sites More sharing options...
asmith Posted January 8, 2008 Author Share Posted January 8, 2008 so you do like the ip banning ? Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.