HTTP_X_FORWARDED_FOR

[Anon]

It is possible to fake this variable using fsockopen()?

[Anon]

It's possible to fake anything with fsockopen(). Since you need to build your own header you can send anything that you want to the server.

Look at www.w3c.org for the structure of HTTP headers and then just build the one that you need.

[Anon]

I know quite much about headers, I thoroughly looked over w3.org pages, but I still have no idea how can I fake such variables like HTTP_X_FORWARDED_FOR. I don't know how code sent to server supposed to look like. I tried:
fputs($sck,"Via: 1.0 fred, 1.1 nowhere.com\n"):
I tried also:
($sck, "Forwarded: by myserv.com for anyserv.com \n")
and in which moment the code should be sent to the server?

[Anon]

HTTP headers have the format:

HTTP 1.1
something
somethingelse

Using a single line feed after each line, and a double line feed at the bottom. So once you know what the forwarded header is you can build it and pass it to the server as long as it comes after the HTTP line and before the double line feed.

PHP takes these headers and builds the HTTP_* variables from them.