PHP curl伪造IP地址和header信息代码实例
curl虽然功能强大，但是只能伪造$_SERVER["HTTP_X_FORWARDED_FOR"]，对于大多数IP地址检测程序来说，$_SERVER["REMOTE_ADDR"]很难被伪造：
首先是client.php的代码
$headers['CLIENT-IP']='202.103.229.40';
$headers['X-FORWARDED-FOR']='202.103.229.40';
$headerArr=array();
foreach($headersas$n=>$v){
$headerArr[]=$n.':'.$v;
}
ob_start();
$ch=curl_init();
curl_setopt($ch,CURLOPT_URL,"http://localhost/curl/server.php");
curl_setopt($ch,CURLOPT_HTTPHEADER,$headerArr); //构造IP
curl_setopt($ch,CURLOPT_REFERER,"http://www.163.com/"); //构造来路
curl_setopt($ch,CURLOPT_HEADER,1);
curl_exec($ch);
curl_close($ch);
$out=ob_get_contents();
ob_clean();
echo$out;
然后是server.php
functionGetIP(){
if(!emptyempty($_SERVER["HTTP_CLIENT_IP"]))
$cip=$_SERVER["HTTP_CLIENT_IP"];
elseif(!emptyempty($_SERVER["HTTP_X_FORWARDED_FOR"]))
$cip=$_SERVER["HTTP_X_FORWARDED_FOR"];
elseif(!emptyempty($_SERVER["REMOTE_ADDR"]))
$cip=$_SERVER["REMOTE_ADDR"];
else
$cip="无法获取！";
return$cip;
}
echo"<br>访问IP:".GetIP()."<br>";
echo"<br>访问来路:".$_SERVER["HTTP_REFERER"];