Quantcast
Channel: Topic Tag: mobile | WordPress.org
Viewing all articles
Browse latest Browse all 22083

kpgraham on "[Plugin: Stop Spammers] Spoofed IP detected using Chrome Reduce data usage"

$
0
0

The problem is that anyone can spoof the chrome proxy server so I can't trust it. I can't white list the chrome proxies because that would allow spammers to use it without being checked.

The issue is that the HTTP_X_FORWARDED_FOR meta information is not trustworthy and a programmer can put any value that she wants in it. The only choice is to not check for spoofing, but then the chrome IP addresses are probably listed in SFS and Honeypot because spammers have been using chrome.

This one of the many reasons that I have stopped developing this plugin. There are too many issues with things like this. IP address is a good way to identify a spammer until it isn't.

Cloudflare has a plugin that verifies the cloudflare proxies. I don't know if there is the chrome proxy equivalent.

Keith


Viewing all articles
Browse latest Browse all 22083

Trending Articles