PHP 使用CURL库IP欺骗,隐藏真实客户端IP
首先搭建环境,建立个ip.php.
代码如下:
<? error_reporting(0); function GetIP(){ if($_SERVER[‘HTTP_CLIENT_IP‘]){ $onlineip=$_SERVER[‘HTTP_CLIENT_IP‘]; }elseif($_SERVER[‘HTTP_X_FORWARDED_FOR‘]){ $onlineip=$_SERVER[‘HTTP_X_FORWARDED_FOR‘]; }else{ $onlineip=$_SERVER[‘REMOTE_ADDR‘]; } return $onlineip; } ?>
再建立个index.php
代码如下:
1 <?php 2 3 error_reporting(0); 4 5 require ‘ip.php‘; 6 7 echo ‘<hr>‘.‘Your IP is ‘.GetIP().‘<br>‘.‘<hr>‘; 8 9 /*echo ‘REMOTE_ADDR is ‘.$_SERVER[‘REMOTE_ADDR‘].‘<br>‘; 10 echo ‘HTTP_CLIENT_IP is ‘.$_SERVER[‘HTTP_CLIENT_IP‘].‘<br>‘; 11 echo ‘HTTP_X_FORWARDED_FOR is ‘.$_SERVER[‘HTTP_X_FORWARDED_FOR‘].‘<br>‘; 12 echo ‘HTTP_VIA is ‘.$_SERVER[‘HTTP_VIA‘];*/ 13 14 ?>
测试:
IP显示正确,客户端真实IP是218.241.179.50
去掉index.php里面的注释,使用代理观察
可以看到REMOTE_ADDR方法抓到了代理IP
HTTP_XFORWARDED_FOR还是抓到了客户端的真实IP
接下来编辑curl_proxy.php,示例代码:
<?php error_reporting(0); function curl_string ($url,$user_agent,$proxy){ $ch = curl_init(); curl_setopt ($ch, CURLOPT_PROXY, $proxy); curl_setopt ($ch, CURLOPT_URL, $url); curl_setopt ($ch, CURLOPT_USERAGENT, $user_agent); curl_setopt ($ch, CURLOPT_COOKIEJAR, "d:\cookies.txt"); curl_setopt ($ch, CURLOPT_HEADER, 1); curl_setopt ($ch, CURLOPT_HTTPHEADER, array(‘CLIENT-IP:125.210.188.36‘, ‘X-FORWARDED-FOR:125.210.188.36‘)); //此处可以改为任意假IP curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1); curl_setopt ($ch, CURLOPT_FOLLOWLOCATION, 1); curl_setopt ($ch, CURLOPT_TIMEOUT, 120); $result = curl_exec ($ch); curl_close($ch); return $result; } $url_page = "http://s4nd.no-ip.org/test/index.php"; $user_agent = "Mozilla/4.0"; $proxy = "http://125.210.188.36:80"; //此处为代理服务器IP和PORT $string = curl_string($url_page,$user_agent,$proxy); echo $string; ?>
访问curl_proxy.php
122.66.*.*是运行脚本服务器的IP,这样就实现了隐藏客户端真实IP的目的。
有的代理服务器会被HTTP_VIA方法侦测到使用了代理服务器,实际上透明代理和高级匿名代理有很大区别。
原文:http://s4nds.diandian.com/post/2012-03-24/17240144
郑重声明:本站内容如果来自互联网及其他传播媒体,其版权均属原媒体及文章作者所有。转载目的在于传递更多信息及用于网络分享,并不代表本站赞同其观点和对其真实性负责,也不构成任何其他建议。