phpproxypiracy

Proxies and piracy - website security

I am building my first website. It is an Online Real Estate Agency. Users can create themselves a profile and then insert an ad and upload pictures.

I was told that I should detect multiple logging attempts to protect against Brute Force attacks. Well, with the following code I detect the IP's :

if(isset($_SERVER['HTTP_X_FORWARDED_FOR']))
{ $ip=$_SERVER['HTTP_X_FORWARDED_FOR'];} else
{ $ip=$_SERVER['REMOTE_ADDR'];}

The system counts missed logging attempts within a certain delay and holds a ban list in a DB. It works great ... at least when a I test it myself !

Then as I was told 'Beware of piracy through false IP's ', I get the impression my protection system mentionned above is made uneffective.

There are :

1) sofwares available to pirats that encompass a Proxy which can hide their real IP

2) proxies on the web that can also hide real IP's.

What 's the difference between 1) and 2) ?

I would like to know how proxies can be used and what they are able to do in term of illicit practices

Thanks a lot.

Solution

  • Proxy is a server that can mask your ip. It will send your request as if it was its and then send you back response that got.

    Can sombody change at will it's Ip ?

    No, they can't just change their ip to whatever they like to. But they can mask it.

    Can somebody in China or in Russia 'simulate' a Western Europe or US ip ?

    Yes

    Can I do more than what I've done to detect any suspicious activity ?

    If you detect that some user name is logging in with wrong password too many times using brute force techniques, you could slow down him by using sleep function. This technique you wouldn't cut off users that are using the proxy without bad intends and you will slow the brute force hacking.

    if($wrongAttempts > 5) sleep(3000);

if($password == $_GET[pass]) 
{
   // ...
}

    You could also start including captcha images to raise security or block the account for some time.