From: Ben Aroia <benaroia@...>
Date: 2008-03-30T17:37:58+09:00
Subject: Re: remote ip address

Arlen Cuss wrote:
> Hi,
>....
> This is dangerous to rely on. From a security point of a view (why do 
> you
> want their IP anyway? question #1.), anyone could just submit a 
> different
> `ip' value and you'd record that.
> 
> See take Martin's advice as is: CGI.new.remote_addr will return the 
> address
> without it being submitted via the PHP script, hence this line of 
> `attack'
> is eliminated.
> 
> Cheers,
> Arlen.

Very good point and I'll consider it. I'm simply using it to get a
general idea of how many times people access it.
-- 
Posted via http://www.ruby-forum.com/.