Hi Randal,

Nice of u to ring up an idea on the limitations of IP address.

But what do u suggest to be used as a validation tool for the users?

IP add + ramdom ports?

thanks!

----- Original Message -----
From: "Randal L. Schwartz" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Thursday, April 04, 2002 5:17 PM
Subject: Re: IP Address


> >>>>> "David" == David Gray <[EMAIL PROTECTED]> writes:
>
> >> How do I get the IP address from a POST form.
> >>
> >> Let me make myself more clear: I have a form that uses POST,
> >> and I would like to get users' IP address for avoiding the
> >> same user to fake my pool's result.
>
> David> You can check $ENV{REMOTE_ADDR}, which will contain the remote IP
of the
> David> user hitting your page.
>
> And that's still insufficient and incorrect.
>
> Repeat after me:
>
>         A user is not an IP address
>         A user is not an IP address
>         A user is not an IP address
>
> Specifically, the largest userbase on the planet, AOL, comes into the
> Internet proper via Web Proxies.  On every hit, a different proxy is
> used, so these hits show up as coming from completely different
> addresses.  Even the main page and the image fetches for that page
> will all show up as different addresses.  And then of course,
> those same small-number-of-proxies are used for millions of users.
>
> So again, I repeat:
>
>         A user is not an IP address
>
> Get it through your head that using IP address for vote blockout
> is just ... WRONG.
> --
> Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777
0095
> <[EMAIL PROTECTED]> <URL:http://www.stonehenge.com/merlyn/>
> Perl/Unix/security consulting, Technical writing, Comedy, etc. etc.
> See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl
training!
>
> --
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>



-- 
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to