Ben Xia said the following on 12/10/2005 17:34:[color=blue]
> Is there some way can detect MAC address with PHP? any help will be
> appreciate.
>[/color]
MAC address of your clients, or the machine you're running on?
If you're talking about clients, then that's impossible unless they're
running on the same local network as the server (i.e. connected to the
same router, in which case you can use command-line "arp -a xx.xx.xx.xx"
in Win, or some equivalent in *nix).
Thanks for the very quick reply, I want to know the mac address of my
clients as I guess these is the best way to fight with internet fraud.
Too sad according your answer seems no way to detect the remote mac
address... as you know to detect the ip address is not very useful... so is
there some better way to detect the fraud? my website has lost 2000 dollars
as some guy are using stolen credit card and do repeat order from different
ip address and different account...
Ben
"Oli Filth" <catch@olifilth .co.uk> wrote in message
news:r_a3f.9133 $6c4.57@newsfe5-win.ntli.net...[color=blue]
> Ben Xia said the following on 12/10/2005 17:34:[color=green]
>> Is there some way can detect MAC address with PHP? any help will be
>> appreciate.
>>[/color]
>
> MAC address of your clients, or the machine you're running on?
>
> If you're talking about clients, then that's impossible unless they're
> running on the same local network as the server (i.e. connected to the
> same router, in which case you can use command-line "arp -a xx.xx.xx.xx"
> in Win, or some equivalent in *nix).
>
>
>
>
> --
> Oli[/color]
Ben Xia said the following on 12/10/2005 17:49:[color=blue]
> Thanks for the very quick reply, I want to know the mac address of my
> clients as I guess these is the best way to fight with internet fraud.
> Too sad according your answer seems no way to detect the remote mac
> address... as you know to detect the ip address is not very useful... so is
> there some better way to detect the fraud? my website has lost 2000 dollars
> as some guy are using stolen credit card and do repeat order from different
> ip address and different account...
>[/color]
Unless you have some way of identifying stolen credit card numbers, how
do you expect to be able to protect against this? How would knowing MAC
addresses help?
On Wed, 12 Oct 2005 12:49:59 -0400, Ben Xia wrote:
[color=blue]
> Thanks for the very quick reply, I want to know the mac address of my
> clients as I guess these is the best way to fight with internet fraud.
> Too sad according your answer seems no way to detect the remote mac
> address... as you know to detect the ip address is not very useful... so is
> there some better way to detect the fraud? my website has lost 2000 dollars
> as some guy are using stolen credit card and do repeat order from different
> ip address and different account...
>
> Ben
>
> "Oli Filth" <catch@olifilth .co.uk> wrote in message
> news:r_a3f.9133 $6c4.57@newsfe5-win.ntli.net...[color=green]
>> Ben Xia said the following on 12/10/2005 17:34:[color=darkred]
>>> Is there some way can detect MAC address with PHP? any help will be
>>> appreciate.
>>>[/color]
>>
>> MAC address of your clients, or the machine you're running on?
>>
>> If you're talking about clients, then that's impossible unless they're
>> running on the same local network as the server (i.e. connected to the
>> same router, in which case you can use command-line "arp -a xx.xx.xx.xx"
>> in Win, or some equivalent in *nix).
>>
>>
>>
>>
>> --
>> Oli[/color][/color]
MAC addresses can be faked
--
Hardware, n.: The parts of a computer system that can be kicked
The best way to get the right answer on usenet is to post the wrong one.
>>> MAC address of your clients, or the machine you're running on?[color=blue][color=green][color=darkred]
>>>
>>> If you're talking about clients, then that's impossible unless they're
>>> running on the same local network as the server (i.e. connected to the
>>> same router, in which case you can use command-line "arp -a xx.xx.xx.xx"
>>> in Win, or some equivalent in *nix).
>>>
>>>
>>>
>>>
>>> --
>>> Oli[/color][/color]
>
>MAC addresses can be faked[/color]
Yes, but except on wireless networks, it's usually not worth the
effort to try and fake one, because the mac address is only seen
by the local network. Even on wireless networks it only applies
to setups that have tried to lock access to a list of authorized
clients, and those systems probably are using WEP or WPA also.
Faking a MAC address can be as easy as (on FreeBSD):
ifconfig fxp0 ether 01:23:45:67:89: ab
It's also easy on Linux (but the syntax may vary a bit), and Windows
XP has a GUI blank to fill in to change it. The UNIX commands
aren't permanent: you have to run them on each boot, so you stick
them in a startup command script. The XP GUI arranges that the
setup is changed every boot.
[color=blue]
> so is there some better way to detect the fraud? my website has lost 2000
> dollars as some guy are using stolen credit card and do repeat order from
> different ip address and different account...[/color]
Your best bet is to use a processing company that will offer you some form
of seller protection, so that when a stolen card is used, the processing
company or the credit card company (not you) will refund the victim. If you
can't find such a company, you may want to purchase fraud or theft
insurance, which will compensate you for stolen amounts.
> > so is there some better way to detect the fraud? my website has lost
2000[color=blue][color=green]
> > dollars as some guy are using stolen credit card and do repeat order[/color][/color]
from[color=blue][color=green]
> > different ip address and different account...[/color]
>
> Your best bet is to use a processing company that will offer you some form
> of seller protection, so that when a stolen card is used, the processing
> company or the credit card company (not you) will refund the victim.[/color]
Does any payment processing company offer such protection? It must be
amazingly expensive, surely?
"Ben Xia" <ben@jetcom.com > writes:
[color=blue]
> Thanks for the very quick reply, I want to know the mac address of my
> clients as I guess these is the best way to fight with internet fraud.[/color]
Why it would be the best way ?
The MAC address of the networking card cna be changd on many
network adapter cards.
[color=blue]
> Too sad according your answer seems no way to detect the remote mac
> address... as you know to detect the ip address is not very useful... so is
> there some better way to detect the fraud? my website has lost 2000 dollars
> as some guy are using stolen credit card and do repeat order from different
> ip address and different account...[/color]
I don't know a solution for this.
--
Tomi Engdahl (http://www.iki.fi/then/)
Take a look at my electronics web links and documents at
You should also consider GeoIP to check the Country of the CC matches the
location where the details are being submitted from.
"Ben Xia" <ben@jetcom.com > wrote in message
news:CWa3f.1870 2$p5.15788@nnrp .ca.mci.com!nnr p1.uunet.ca...[color=blue]
> Is there some way can detect MAC address with PHP? any help will be
> appreciate.
>
> Ben
>[/color]
"Joe90" <boy_bandreject REMOVE@hotmail. com> wrote in message
news:dj0p49$hl8 $1@nwrdmz02.dmz .ncs.ea.ibs-infra.bt.com...[color=blue]
> You should also consider GeoIP to check the Country of the CC matches the
> location where the details are being submitted from.
>[/color]
I see the logic, but this could stop legitimate transactions. For instance
when I visit a hotel in Switzerland I pay for internet access using my UK
credit card...
James.
Comment