ballhogjoni Posted September 29, 2011 Share Posted September 29, 2011 Can you see if a request (post/get) is from a curl request or an actual user? I am trying to defeat a little bit of fraud. Quote Link to comment Share on other sites More sharing options...
PFMaBiSmAd Posted September 29, 2011 Share Posted September 29, 2011 cURL stands for - Client URL Library and the whole point of it is to be able to make requests that are identical to what a client would make. The only thing you can do is detect the information that is part of the request, such as the IP address, HTTP Request Headers, cookies/session id cookie, URL (path/page), and any post/get data. If the person using curl to make the request is doing it from an expected IP address and is supplying any expected header/cookie/token/URL/post/get values, then you would not be able to distinguish a curl request from a browser making the request. What exact problem are you having that you are trying to solve? Quote Link to comment Share on other sites More sharing options...
ballhogjoni Posted October 4, 2011 Author Share Posted October 4, 2011 trying to return an auth token to the client via an ajax request. with curl you can fake out an ajax request, right? Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.