Php uses Curl to forge the client source IP address

I found many methods on the internet to use Curl to forge the client source IP address, almost all of which use the curl function. later I verified that this function is powerful, not only can the client source IP address be forged, but also

I found many methods on the internet to use Curl to forge the client source IP address, almost all of which use the curl function. later I verified that this function is powerful, not only can the client source IP address be forged, but also the proxy IP address be forged. let's look at the code.

Generally, the server can obtain the client IP address in three cases.

1. if no proxy is used:

# Http://www.phpfensi.com

REMOTE_ADDR = customer IP

HTTP_VIA = null

HTTP_X_FORWARDED_FOR = null

2. when the proxy is used and the proxy server has the IP address of the forwarding client configured:

REMOTE_ADDR = proxy server IP address

HTTP_VIA = proxy server IP address

HTTP_X_FORWARDED_FOR = customer IP

The HTTP_VIA and HTTP_X_FORWARDED_FOR values can be customized by adding the Header to hide the client IP, provided that X_FORWARDED_FOR is enabled on the server.

Test results: Create a PHP program on the server.

Example code 1: The code is as follows:

2. $ Ch = curl_init ();
3. Curl_setopt ($ ch, CURLOPT_URL, "http: // localhost/index. php ");
4. Curl_setopt ($ ch, CURLOPT_HTTPHEADER, array ('x-FORWARDED-FOR: 8.8.8.8 ', 'client-IP: 8.8.8.8 '));
5. // Construct an IP address
6. Curl_setopt ($ ch, CURLOPT_REFERER, "http://www.phpfensi.com/"); // Construct a path
7. Curl_setopt ($ ch, CURLOPT_HEADER, 1 );
8. $ Out = curl_exec ($ ch );
9. Curl_close ($ ch );

Example code 2: php code:

2. Function getClientIp (){
3. If (! Emptyempty ($ _ SERVER ["HTTP_CLIENT_IP"])
4. $ Ip = $ _ SERVER ["HTTP_CLIENT_IP"];
5. Else if (! Emptyempty ($ _ SERVER ["HTTP_X_FORWARDED_FOR"])
6. $ Ip = $ _ SERVER ["HTTP_X_FORWARDED_FOR"];
7. Else if (! Emptyempty ($ _ SERVER ["REMOTE_ADDR"])
8. $ Ip = $ _ SERVER ["REMOTE_ADDR"];
9. Else
10. $ Ip = "err ";
11. Return $ ip;
12. }
13. Echo "IP:". getClientIp ()."";
14. Echo "referer:". $ _ SERVER ["HTTP_REFERER"];
15. Echo "IP:". getClientIp ()."";
16. Echo "referer:". $ _ SERVER ["HTTP_REFERER"];

Forged successfully. does this provide a good IP address change solution for the "fake ticket" friends? haha.

Result:

1. HTTP/1.1 200 OK Date: Wed, 03 Apr 2013 06:20:42 GMT Server: Apache/2.2.22 (Win32) PHP/5.3.13
2. X-Powered-By: PHP/5.3.13 Content-Length: 44 Content-Type: text/html
3. IP: 8.8.8.8

Referer: http://www.phpfensi.com/

The following describes the curl function.

List of curl-related functions:

Curl_init-initialize a CURL session

Curl_setopt-set an option for CURL calls

Curl_exec-execute a CURL session

Curl_close-close a CURL session

Curl_version-returns the current CURL version

1> curl_init-initialize a CURL session