It depends on which CGI variable you are talking about.  Some are set at the server 
and can be considered accurate, while others are sent by the client and should not be 
trusted.

A concise listing of the types can be found on page 25 of the "Quick Reference Guide 
to CFML" that comes with CF 4.5.  For a full listing, you will need to reference the 
CGI 1.1 spec.

Kevin

>>> [EMAIL PROTECTED] 04/18/01 04:10PM >>>
        I am playing around with cgi variables to see how secure they are. What I
want to know is there anyway to change say the remote_addr or is that
getting the ip address from somewhere else. I tried changing it to see how
good my security is on a site I am coding and it wouldn't not change the
remote_addr at all (I am using HTTP and httpparam to do this). Anyone have
any insight into this?


Bob Everland
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm

Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to