[RESOLVED] ip security

[scrypte]

ok what i am trying to do is when u go to vote to check ur ip based upon a subid and compare that to the remote address to prevent double votes

here is the coding

/* BEGIN ANTI CHEATING VERIFICATION PROTOCAL */
$sql = "SELECT * FROM voted WHERE subid = $subid";
$r = mysql_query($sql) or die('Error, query failed');
$arr = mysql_fetch_array($r);
         $ip = $arr['ip_address'];

     if ($ip = $REMOTE_ADDR) {
              echo "<p align=center  class=contest_small>SORRY YOU HAVE ALREADY VOTED";
              exit;
     }
/*END ANTI CHEATING PROTOCAL */

[Oni]

if ($ip = $REMOTE_ADDR) {

TO

if ($ip == $REMOTE_ADDR) {

I always make the same mistake too 😉

[Oni]

There is also another problem:

if ($ip == $REMOTE_ADDR) {

To:

if ($ip == getenv(REMOTE_ADDR)) {

[MarkR]

In fact you may want to try

 $_SERVER['REMOTE_ADDR']

Instead. Using barewords as literal strings is bad and generates notices, as you've doubtless noticed.

Mark

[scrypte]

its working fine now, only problem that will arrise is when they have a dynamic ip address, i'm still researching how to get a system hash with php