Page Index Toggle Pages: 1 Send TopicPrint
Normal Topic [DONE] User IP Fix mod (Read 2455 times)
CLAN Admin
Full Member
***
Offline



Posts: 176
Location: london
Joined: Sep 17th, 2002
[DONE] User IP Fix mod
Dec 11th, 2002 at 1:55pm
Print Post  
This is a tiny mod which make a small change to the way user_ip is detected in YaBB SP1.

The way the YaBB script is, it is very easy to send false data instead of IP which would be logged by the YaBB script. This would make IP logging unreliable.

It is the result of my post here

Topic: YaBB 1.1 bug or not? Yes it is a bug.

I have not submitted this to the database.

Admin:
If you think it would benefit the users, please include it in the database.

Good luck
Smiley
« Last Edit: Dec 13th, 2002 at 10:37pm by CLAN Admin »  

user_ip_fix.zip ( 0 KB | Downloads )

© AZ aka CLAN admin aka Guardian
AZbb :: AZ Bulletin Board has arrived
Simple guide: Apache and PHP installation on Windows
Back to top
 
IP Logged
 
Dummy Proof
God Member
*****
Offline


I hate Bosses!  Now get
to work!

Posts: 991
Location: Outside L.A.
Joined: Aug 8th, 2002
Gender: Male
Re: [DONE] User IP Fix mod
Reply #1 - Dec 11th, 2002 at 2:24pm
Print Post  
Can't "$ENV{'REMOTE_ADDR'}"  ever equal null?

If this is true then, then the routine would not be run right?

Do *all* providers automatically use "$ENV{'REMOTE_ADDR'}".

What happened to releasing mods as BETA first?

Dummy
  

Ya can Idiot proof it...
Ya can Dummy proof it...
But ya can never...
...Blonde proof it!
Back to top
WWW  
IP Logged
 
CLAN Admin
Full Member
***
Offline



Posts: 176
Location: london
Joined: Sep 17th, 2002
Re: [DONE] User IP Fix mod
Reply #2 - Dec 11th, 2002 at 3:05pm
Print Post  
Hi
'REMOTE_ADDR' (remote address)  is one of the basic structural protocols of internet. It tells the server where to send the data. If it is null, no data is sent as there is no were to send it. So no connection is made.

It is true that 'REMOTE_ADDR' can be masked by proxy IPs which means 'REMOTE_ADDR' would show the porxy server's IP but it would always show an IP. It may not be the true IP of the users but never-the-less it is there.

In the case of a proxy server, connection is made from the http server to proxy sever and then proxy server in turn passes it to the actual users.

So there is one 'REMOTE_ADDR' used between the http server and proxy server and another between proxy server and user. That is how the user can hide his/her IP behind a proxy.

I hope that helps.
Let me know if further info is required.

Check out some scripts on my site that I wrote, to see what Env are passed by your connection.

Basic check
http://clan.cyaccess.com/index.php?menupxy&env

ProxyScore (Comprehensive check)
http://clan.cyaccess.com/?menups&proxyscore

Good Luck
Smiley
« Last Edit: Sep 5th, 2003 at 11:30am by CLAN Admin »  

© AZ aka CLAN admin aka Guardian
AZbb :: AZ Bulletin Board has arrived
Simple guide: Apache and PHP installation on Windows
Back to top
 
IP Logged
 
Page Index Toggle Pages: 1
Send TopicPrint