Reply to thread

Message: <blockquote data-quote="MayoMayn" data-source="post: 453492" data-attributes="member: 71840">Man, you gotta learn how to read.When did I ever mention spoofing?If you have your server sitting behind a NGINX proxy, and you don't/or do forward the request headers, then checking against $_SERVER['REMOTE_ADDR'] will be useless as it will always resolve to the IP of the proxy and not the incoming request.That's why you check the x-forwarded-for header.This is pretty basic stuff dude and the list of checks to do is long.The thread you linked to is almost 3 years old btw.</blockquote>