SoFunction
Updated on 2025-03-01

PHP curl forged IP address and header information code example

Although curl is powerful, it can only forge $_SERVER["HTTP_X_FORWARDED_FOR"]. For most IP address detection programs, $_SERVER["REMOTE_ADDR"] is difficult to forge:

First of all, the code

Copy the codeThe code is as follows:

$headers['CLIENT-IP'] = '202.103.229.40'; 
$headers['X-FORWARDED-FOR'] = '202.103.229.40';
 
$headerArr = array(); 
foreach( $headers as $n => $v ) { 
    $headerArr[] = $n .':' . $v;  
}
 
ob_start();
$ch = curl_init();
curl_setopt ($ch, CURLOPT_URL, "http://localhost/curl/");
curl_setopt ($ch, CURLOPT_HTTPHEADER , $headerArr ); //Construct IP
curl_setopt ($ch, CURLOPT_REFERER, "http:/// ");   //Construction origin
curl_setopt( $ch, CURLOPT_HEADER, 1);
 
curl_exec($ch);
curl_close ($ch);
$out = ob_get_contents();
ob_clean();
 
echo $out;

Then

Copy the codeThe code is as follows:

function GetIP(){
    if(!emptyempty($_SERVER["HTTP_CLIENT_IP"]))
        $cip = $_SERVER["HTTP_CLIENT_IP"];
    else if(!emptyempty($_SERVER["HTTP_X_FORWARDED_FOR"]))
        $cip = $_SERVER["HTTP_X_FORWARDED_FOR"];
    else if(!emptyempty($_SERVER["REMOTE_ADDR"]))
        $cip = $_SERVER["REMOTE_ADDR"];
    else
$cip = "Unable to obtain!";
    return $cip;
}
echo "<br>Access IP: ".GetIP()."<br>";
echo "<br>Access: ".$_SERVER["HTTP_REFERER"];