Hello and welcome to our community! Is this your first visit?
Register
Enjoy an ad free experience by logging in. Not a member yet? Register.
Results 1 to 8 of 8
  1. #1
    Senior Coder BarrMan's Avatar
    Join Date
    Feb 2005
    Location
    Israel.
    Posts
    1,644
    Thanks
    69
    Thanked 83 Times in 82 Posts

    Securing a website

    Hey.
    Changing IP is a very easily achieved method. Thus, securing a web basing the functions on the users IP isn't usually usefull and banning the user won't be effective for the sole reason that the users can bypass it by changing the IP.

    Is there another way of detecting a user regardless of its IP? Something static that doesn't ever change? If not.. Is there maybe another method of trying to achieve what I want?

    Thanks!

  • #2
    Senior Coder gnomeontherun's Avatar
    Join Date
    Sep 2007
    Location
    Houston
    Posts
    2,846
    Thanks
    10
    Thanked 238 Times in 229 Posts
    The only way besides IP the I know is to force a login for membership (which can be a huge deterrant to people, or they could set up several accounts which cause problems tracking) or tracking cookie (which can be easily cleared).

    http://www.homelandstupidity.us/software/bad-behavior/

    This is a set of PHP scripts that help combat spam (probably not what you wanted exactly, but I'm not sure), but I don't know any way to have automatic user detection without IP.
    jeremy - gnomeontherun
    Educated questions often get educated answers, and simple questions often get simple answers.

  • #3
    Senior Coder BarrMan's Avatar
    Join Date
    Feb 2005
    Location
    Israel.
    Posts
    1,644
    Thanks
    69
    Thanked 83 Times in 82 Posts
    Thanks for the help! But I'm pretty sure I've seen sites that can track you even though you change the IP. How can it be done? Is there a way you can detect the PROXY address?

  • #4
    Senior Coder gnomeontherun's Avatar
    Join Date
    Sep 2007
    Location
    Houston
    Posts
    2,846
    Thanks
    10
    Thanked 238 Times in 229 Posts
    This is beyond my expertise, but again if the IP changes then you have no concrete way to determine if the new IP is related to any old ones (as far as I'm aware?). Maybe someone else knows?
    jeremy - gnomeontherun
    Educated questions often get educated answers, and simple questions often get simple answers.

  • #5
    Supreme Master coder! _Aerospace_Eng_'s Avatar
    Join Date
    Dec 2004
    Location
    In a place far, far away...
    Posts
    19,291
    Thanks
    2
    Thanked 1,043 Times in 1,019 Posts
    Quote Originally Posted by BarrMan View Post
    Thanks for the help! But I'm pretty sure I've seen sites that can track you even though you change the IP. How can it be done? Is there a way you can detect the PROXY address?
    And what sites might those be? Its likely they just put a cookie on your computer or they started a session on their server.
    ||||If you are getting paid to do a job, don't ask for help on it!||||

  • #6
    Senior Coder BarrMan's Avatar
    Join Date
    Feb 2005
    Location
    Israel.
    Posts
    1,644
    Thanks
    69
    Thanked 83 Times in 82 Posts
    MegaUpload does that... I've tried bypassing it(To check how it works).
    So I deleted the cookies, Opened another browsing window, changed my IP and still it could detect me.
    I've disabled the cookies, IP detection and Sessions. How else can it recognize me?

  • #7
    Supreme Master coder! _Aerospace_Eng_'s Avatar
    Join Date
    Dec 2004
    Location
    In a place far, far away...
    Posts
    19,291
    Thanks
    2
    Thanked 1,043 Times in 1,019 Posts
    You probably didn't change your IP properly. I've done it before to see if would work and it does. People use proxies but even then some proxies won't work or they will be really slow.
    ||||If you are getting paid to do a job, don't ask for help on it!||||

  • #8
    Senior Coder BarrMan's Avatar
    Join Date
    Feb 2005
    Location
    Israel.
    Posts
    1,644
    Thanks
    69
    Thanked 83 Times in 82 Posts
    Hmm, I'm pretty sure I checked the IP. Maybe the reason that it could track me down all the time is because I had their toolbar installed in my computer. That should be it.

    Thanks alot for trying to help me!


  •  

    Posting Permissions

    • You may not post new threads
    • You may not post replies
    • You may not post attachments
    • You may not edit your posts
    •