Hi Randal, Nice of u to ring up an idea on the limitations of IP address.
But what do u suggest to be used as a validation tool for the users? IP add + ramdom ports? thanks! ----- Original Message ----- From: "Randal L. Schwartz" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Thursday, April 04, 2002 5:17 PM Subject: Re: IP Address > >>>>> "David" == David Gray <[EMAIL PROTECTED]> writes: > > >> How do I get the IP address from a POST form. > >> > >> Let me make myself more clear: I have a form that uses POST, > >> and I would like to get users' IP address for avoiding the > >> same user to fake my pool's result. > > David> You can check $ENV{REMOTE_ADDR}, which will contain the remote IP of the > David> user hitting your page. > > And that's still insufficient and incorrect. > > Repeat after me: > > A user is not an IP address > A user is not an IP address > A user is not an IP address > > Specifically, the largest userbase on the planet, AOL, comes into the > Internet proper via Web Proxies. On every hit, a different proxy is > used, so these hits show up as coming from completely different > addresses. Even the main page and the image fetches for that page > will all show up as different addresses. And then of course, > those same small-number-of-proxies are used for millions of users. > > So again, I repeat: > > A user is not an IP address > > Get it through your head that using IP address for vote blockout > is just ... WRONG. > -- > Randal L. Schwartz - Stonehenge Consulting Services, Inc. - +1 503 777 0095 > <[EMAIL PROTECTED]> <URL:http://www.stonehenge.com/merlyn/> > Perl/Unix/security consulting, Technical writing, Comedy, etc. etc. > See PerlTraining.Stonehenge.com for onsite and open-enrollment Perl training! > > -- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]