phpcurl伪造IP和来路

2. $headers['CLIENT-IP'] = '202.103.229.40';
3. $headers['X-FORWARDED-FOR'] = '202.103.229.40';
5. $headerArr = array();
6. foreach( $headers as $n => $v ) {
7. $headerArr[] = $n .':' . $v;
8. }
10. ob_start();
11. $ch = curl_init();
12. curl_setopt ($ch, CURLOPT_URL, "http://localhost/curl/server.php");
13. curl_setopt ($ch, CURLOPT_HTTPHEADER , $headerArr ); //构造IP
14. curl_setopt ($ch, CURLOPT_REFERER, "http://bbs.it-home.org/ "); //构造来路
15. curl_setopt( $ch, CURLOPT_HEADER, 1);
17. curl_exec($ch);
18. curl_close ($ch);
19. $out = ob_get_contents();
20. ob_clean();
22. echo $out;
23. ?>

2，curl伪造IP和来路 服务端 server.php

2. function GetIP(){
3. if(!empty($_SERVER["HTTP_CLIENT_IP"]))
4. $cip = $_SERVER["HTTP_CLIENT_IP"];
5. else if(!empty($_SERVER["HTTP_X_FORWARDED_FOR"]))
6. $cip = $_SERVER["HTTP_X_FORWARDED_FOR"];
7. else if(!empty($_SERVER["REMOTE_ADDR"]))
8. $cip = $_SERVER["REMOTE_ADDR"];
9. else
10. $cip = "无法获取！";
11. return $cip;
12. }
13. echo "
    访问IP: ".GetIP()."
    ";
14. echo "
    访问来路: ".$_SERVER["HTTP_REFERER"];
15. ?>

补充：$_SERVER['REMOTE_ADDR']无法伪造。