Security Basics mailing list archives

Re: Nmap Online


From: "etropos" <etropos () gmail com>
Date: Thu, 7 Dec 2006 18:01:59 -0300

Hi all,
check some comments here > http://www.php.net/manual/en/function.getenv.php
and this...

...8<
if ($_SERVER) {
if ( $_SERVER[HTTP_X_FORWARDED_FOR] ) {
$realip = $_SERVER["HTTP_X_FORWARDED_FOR"];
} elseif ( $_SERVER["HTTP_CLIENT_IP"] ) {
$realip = $_SERVER["HTTP_CLIENT_IP"];
} else {
$realip = $_SERVER["REMOTE_ADDR"];
}
} else { idem

...8<

Dasvidania.

Carlos Tori
PGP ID 0x7F81D818
Dum loquimur, fugerit invida aetas: carpe diem, quam minimum credula postero.
Horacio, Odas, I, 11, 7-8


----- Original Message ----- From: "Dolan, Patrick" <patrick.dolan () lmco com>
To: <security-basics () securityfocus com>
Sent: Monday, December 04, 2006 5:51 PM
Subject: RE: Nmap Online


If you connect through a proxy, it will forward your internal IP in the
headers.

-----Original Message-----
From: listbounce () securityfocus com [mailto:listbounce () securityfocus com]
On Behalf Of Tasos Laskos
Sent: Monday, December 04, 2006 1:20 AM
To: security-basics () securityfocus com
Subject: Re: Nmap Online

Well, it crossed my mind but I saw no JS in the page.
Maybe I didn't look hard enough or something....

It's still bugging me.


---------------------------------------------------------------------------
This list is sponsored by: ByteCrusher

Detect Malicious Web Content and Exploits in Real-Time.
Anti-Virus engines can't detect unknown or new threats.
LinkScanner can. Web surfing just became a whole lot safer.

http://www.explabs.com/staging/promotions/xern_lspro.asp?loc=sfmaildetect
---------------------------------------------------------------------------


Current thread: