trying to capture IP address of PC that submits data to Access db

I have a form on a site where users submit some data. I have had a problem
with someone submitting garbage data, I can delete it but would like to stop
it. I started capturing IP addresses using the code below to write the IP to
the access db where the other data goes. I have submitted the form from 2
different PCs and collected my IP address, but my nemisis has submitted
again and it did not collect his IP address. How did he prevent that and how
can I identify him. I do not actually want to find him but would just change
my code to ignore anything from his IP. TIA

Larry

">

rs("captureIP") = IPAddress

Re: trying to capture IP address of PC that submits data to Access db

Larry D wrote:
> I have a form on a site where users submit some data. I have had a
> problem with someone submitting garbage data, I can delete it but
> would like to stop it. I started capturing IP addresses using the
> code below to write the IP to the access db where the other data
> goes. I have submitted the form from 2 different PCs and collected my
> IP address, but my nemisis has submitted again and it did not collect
> his IP address. How did he prevent that and how can I identify him. I
> do not actually want to find him but would just change my code to
> ignore anything from his IP. TIA
> Larry
>
> ">
>
> rs("captureIP") = IPAddress

It cannot be done. There is no method that cannot be defeated by a
determined hacker. Concentrate instead on rejecting bad data.
--
Microsoft MVP - ASP/ASP.NET
Please reply to the newsgroup. This email account is my spam trap so I
don't check it very often. If you must reply off-line, then remove the
"NO SPAM"

Re: trying to capture IP address of PC that submits data to Access db

"Larry D" wrote in message
news:u8BQNHE5HHA.3684@TK2MSFTNGP02.phx.gbl...
>I have a form on a site where users submit some data. I have had a problem
>with someone submitting garbage data, I can delete it but would like to
>stop it. I started capturing IP addresses using the code below to write the
>IP to the access db where the other data goes. I have submitted the form
>from 2 different PCs and collected my IP address, but my nemisis has
>submitted again and it did not collect his IP address. How did he prevent
>that and how can I identify him. I do not actually want to find him but
>would just change my code to ignore anything from his IP. TIA
>
> Larry
>
> ">
>
> rs("captureIP") = IPAddress

There're quite a few methods by which a site visitor can get to your site,
and REMOTE_ADDR won't necessarily be populated by all of those methods.

Here's a snippet from a site statistics gatherer I put together a few years
ago; it won't be successful 100% of the time, but it'll be a lot more
successful than your single-value check.

sIP = trim(Request.ServerVariables("REMOTE_ADDR"))
if not isIP(sIP) then
sIP = trim(Request.ServerVariables("REMOTE_HOST"))
if not isIP(sIP) then
sIP = trim(Request.ServerVariables("HTTP_CLIENT_IP"))
if not isIP(sIP) then
sIP = trim(Request.ServerVariables("HTTP_X_FORWARDED_FOR"))
end if
end if
end if
if not isIP(sIP) then sIP = "(unknown)"

And the boolean isIP function, which simply checks for a valid IP address;

function isIP(sIP)
if isNull(sIP) or len(sIP) < 7 then
isIP = false
exit function
end if
bOutput = true
aQuads = split(sIP, ".")
if uBound(aQuads) <> 3 then
isIP = false
exit function
end if
for i = 0 to 3
if not isNumeric(aQuads(i)) then
bOutput = false
exit for
end if
if aQuads(i) < 0 or aQuads(i) > 255 then
bOutput = false
exit for
end if
next
isIP = bOutput
end function

--
Bob Milutinovic
Cognicom - "Australia's Web Presence Specialists"
http://www.cognicom.net.au/
telephone (0417) 45-77-66
facsimile (02) 9824-2240

Re: trying to capture IP address of PC that submits data to Access db

Bob Milutinovic wrote on 22 aug 2007 in microsoft.public.inetserver.asp.db:

> function isIP(sIP)
> if isNull(sIP) or len(sIP) < 7 then
> isIP = false
> exit function
> end if
> bOutput = true
> aQuads = split(sIP, ".")
> if uBound(aQuads) <> 3 then
> isIP = false
> exit function
> end if
> for i = 0 to 3
> if not isNumeric(aQuads(i)) then
> bOutput = false
> exit for
> end if
> if aQuads(i) < 0 or aQuads(i) > 255 then
> bOutput = false
> exit for
> end if
> next
> isIP = bOutput
> end function
>

<%
function isIP(x)
reTemp = "(\d|([1-9]\d)|(1\d\d)|(2[0-4]\d)|(25[0-5]))"
Set regEx = New RegExp
regEx.Pattern = "^(" & reTemp & "\.){3}" & reTemp & "$"
isIP = regEx.Test(x)
End Function
%>

--
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

Re: trying to capture IP address of PC that submits data to Access db

"Evertjan." wrote in message
news:Xns99945FDCC8518eejj99@194.109.133.242...
> Bob Milutinovic wrote on 22 aug 2007 in
> microsoft.public.inetserver.asp.db:
>
>> function isIP(sIP)
>> if isNull(sIP) or len(sIP) < 7 then
>> isIP = false
>> exit function
>> end if
>> bOutput = true
>> aQuads = split(sIP, ".")
>> if uBound(aQuads) <> 3 then
>> isIP = false
>> exit function
>> end if
>> for i = 0 to 3
>> if not isNumeric(aQuads(i)) then
>> bOutput = false
>> exit for
>> end if
>> if aQuads(i) < 0 or aQuads(i) > 255 then
>> bOutput = false
>> exit for
>> end if
>> next
>> isIP = bOutput
>> end function
>>
>
> <%
> function isIP(x)
> reTemp = "(\d|([1-9]\d)|(1\d\d)|(2[0-4]\d)|(25[0-5]))"
> Set regEx = New RegExp
> regEx.Pattern = "^(" & reTemp & "\.){3}" & reTemp & "$"
> isIP = regEx.Test(x)
> End Function
> %>

Indeed.

In my defence, as I said, I'd written the routine several years ago.

But I'll thank you nonetheless; yours is a far more elegant solution.

--
Bob Milutinovic
Cognicom - "Australia's Web Presence Specialists"
http://www.cognicom.net.au/
telephone (0417) 45-77-66
facsimile (02) 9824-2240