Re: php - inject code into $_SERVER ?

Ole Martin Eide <[email protected]> Tue, 08 Feb 2005 07:26:30 +0100
Newsgroups gmane.comp.security.programming
Message-ID <[email protected]>
Dave Hull wrote:

>We have developed a solution that hopefully will be open sourced in
>the next few months. In a nutshell, we have a DHCP server that assigns
>non-routable (10.10.x.x) IP addresses to unknown hosts on the network.
>These hosts are redirected to a local authentication server via a
>simple DNS hack that redirects all requests to a host of our choosing.
>
>Once users have downloaded an application to their local machine and
>we have verified they are fully patched and are pulling updates for
>both OS and anti-virus software, we assign them a routable IP for our
>primary network and they are free to go whereever they want.
>
>There are some problems that we have solutions for, but are still
>implementing, like what to do for people who hard-code a routable IP
>address on their machines, etc.
>
>I'm sure our solution is not novel, I've seen captive portals in
>coffee shops that provide the same functionality.
>  
>
Thanks for all answers regarding this subject. :)

The use area for something like this will be at a lanparty - it would be 
really great to finally put an end to all the virii. I guess i'll do 
some serious thinking and testing. Any other pointers/tips are very 
welcome :)

Regards
Ole Martin Eide