php获取客户端ip以及ip伪造

<?php

//获取客户端ip,但是如果使用了代理,则获取到的是代理之后的ip

echo '1-'.getenv("REMOTE_ADDR").'</br>';

//获取的是客户端访问时header头部带的ip,可任意伪造

echo '2-'.getenv("HTTP_CLIENT_IP").'</br>';

//客户端真实 IP ,但是如果没有使用代理就不返回真实ip

echo '3-'.getenv("HTTP_X_FORWARDED_FOR").'</br>';

<?php

//使用curl伪造head信息发送欺骗服务器。随机生成

$ip = mt_rand(1,254).mt_rand(0,254).mt_rand(0,254).mt_rand(0,254);

$header = array(

'CLIENT-IP:'.$ip,

'X-FORWARDED-FOR:'.$ip,

);

//伪造浏览器信息

$info =array('Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; InfoPath.2; AskTbPTV/5.17.0.25589; Alexa Toolbar)','Mozilla/5.0 (Windows NT 5.1; rv:22.0) Gecko/20100101 Firefox/22.0','Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0; .NET4.0C; Alexa Toolbar)','Mozilla/4.0(compatible; MSIE 6.0; Windows NT 5.1; SV1)');

 $ch = curl_init();//创建一个curl句柄

 curl_setopt ($ch, CURLOPT_URL, 'http://www.baidu.com/');//列如欺骗百度

 curl_setopt ($ch, CURLOPT_HTTPHEADER, $header);//发送header信息

 curl_setopt ($ch, CURLOPT_REFERER, "http://www.baidu.com/");//可任意伪造来源

 curl_setopt ($ch, CURLOPT_RETURNTRANSFER, 1);

 curl_setopt ($ch, CURLOPT_USERAGENT, "$info");//伪造浏览器信息

 curl_setopt ($ch, CURLOPT_CONNECTTIMEOUT, 3); 

 $contents = curl_exec($ch); //执行句柄

 curl_close($ch);//结束

 var_dump($contents);//打印变量结构