Eugene Ionichev wrote:
Btw, IP whitelisting does not work in case of spoofed IP.
How do you spoof an IP on TCP? It requires a three-way handshake.
http://en.wikipedia.org/wiki/Transmission_Control_Protocol#Connection_establishment
It can only be spoofed if the plugin is using headers to try and determine the actual IP, which I do not believe it is doing anymore as Keith previously mentioned.
