Re: $_SERVER['REMOTE_ADDR'] and sql injection

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, 2010-06-23 at 10:35 -0400, Andrew Ballard wrote:

> On Wed, Jun 23, 2010 at 6:01 AM, Ashley Sheridan
> <ash@xxxxxxxxxxxxxxxxxxxx> wrote:
> > That's what I'd use. You may also have to wrap it inside an abs() call
> > to ensure it's a positive number, as some IP addresses equate to
> > negative with ip2long().
> 
> NO NO NO NO NO!!!!
> 
> <?php
> 
> $x = ip2long('192.168.0.1');
> var_dump($x);
> // int(-1062731775)
> 
> var_dump(long2ip($x));
> // string(11) "192.168.0.1"
> 
> var_dump(long2ip(abs($x)));
> // string(13) "63.87.255.255"
> 
> ?>
> 
> Andrew
> 

Someone had better tell all the makers of the ip2country databases then,
because there's not a negative number in sight!

Thanks,
Ash
http://www.ashleysheridan.co.uk



[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux