Detect MAC address with PHP

[Ben Xia]

Is there some way can detect MAC address with PHP? any help will be
appreciate.

Ben

[Oli Filth]

Ben Xia said the following on 12/10/2005 17:34:

Is there some way can detect MAC address with PHP? any help will be
appreciate.

MAC address of your clients, or the machine you're running on?

If you're talking about clients, then that's impossible unless they're
running on the same local network as the server (i.e. connected to the
same router, in which case you can use command-line "arp -a xx.xx.xx.xx"
in Win, or some equivalent in *nix).


--
Oli

[Ben Xia]

Thanks for the very quick reply, I want to know the mac address of my
clients as I guess these is the best way to fight with internet fraud.
Too sad according your answer seems no way to detect the remote mac
address... as you know to detect the ip address is not very useful... so is
there some better way to detect the fraud? my website has lost 2000 dollars
as some guy are using stolen credit card and do repeat order from different
ip address and different account...

Ben

"Oli Filth" <ca***@olifilth.co.uk> wrote in message
news:r_***************@newsfe5-win.ntli.net...

Ben Xia said the following on 12/10/2005 17:34:

Is there some way can detect MAC address with PHP? any help will be
appreciate.

MAC address of your clients, or the machine you're running on?

If you're talking about clients, then that's impossible unless they're
running on the same local network as the server (i.e. connected to the
same router, in which case you can use command-line "arp -a xx.xx.xx.xx"
in Win, or some equivalent in *nix).


--
Oli

[Oli Filth]

Ben Xia said the following on 12/10/2005 17:49:

Thanks for the very quick reply, I want to know the mac address of my
clients as I guess these is the best way to fight with internet fraud.
Too sad according your answer seems no way to detect the remote mac
address... as you know to detect the ip address is not very useful... so is
there some better way to detect the fraud? my website has lost 2000 dollars
as some guy are using stolen credit card and do repeat order from different
ip address and different account...

Unless you have some way of identifying stolen credit card numbers, how
do you expect to be able to protect against this? How would knowing MAC
addresses help?
--
Oli

[Shane]

On Wed, 12 Oct 2005 12:49:59 -0400, Ben Xia wrote:

Thanks for the very quick reply, I want to know the mac address of my
clients as I guess these is the best way to fight with internet fraud.
Too sad according your answer seems no way to detect the remote mac
address... as you know to detect the ip address is not very useful... so is
there some better way to detect the fraud? my website has lost 2000 dollars
as some guy are using stolen credit card and do repeat order from different
ip address and different account...

Ben

"Oli Filth" <ca***@olifilth.co.uk> wrote in message
news:r_***************@newsfe5-win.ntli.net...

Ben Xia said the following on 12/10/2005 17:34:

Is there some way can detect MAC address with PHP? any help will be
appreciate.

MAC address of your clients, or the machine you're running on?

If you're talking about clients, then that's impossible unless they're
running on the same local network as the server (i.e. connected to the
same router, in which case you can use command-line "arp -a xx.xx.xx.xx"
in Win, or some equivalent in *nix).


--
Oli

MAC addresses can be faked

--
Hardware, n.: The parts of a computer system that can be kicked

The best way to get the right answer on usenet is to post the wrong one.

[Gordon Burditt]

>>> MAC address of your clients, or the machine you're running on?

If you're talking about clients, then that's impossible unless they're
running on the same local network as the server (i.e. connected to the
same router, in which case you can use command-line "arp -a xx.xx.xx.xx"
in Win, or some equivalent in *nix).


--
Oli

MAC addresses can be faked

Yes, but except on wireless networks, it's usually not worth the
effort to try and fake one, because the mac address is only seen
by the local network. Even on wireless networks it only applies
to setups that have tried to lock access to a list of authorized
clients, and those systems probably are using WEP or WPA also.

Faking a MAC address can be as easy as (on FreeBSD):

ifconfig fxp0 ether 01:23:45:67:89:ab

It's also easy on Linux (but the syntax may vary a bit), and Windows
XP has a GUI blank to fill in to change it. The UNIX commands
aren't permanent: you have to run them on each boot, so you stick
them in a startup command script. The XP GUI arranges that the
setup is changed every boot.
Gordon L. Burditt

[ECRIA Public Mail Buffer]

so is there some better way to detect the fraud? my website has lost 2000
dollars as some guy are using stolen credit card and do repeat order from
different ip address and different account...

Your best bet is to use a processing company that will offer you some form
of seller protection, so that when a stolen card is used, the processing
company or the credit card company (not you) will refund the victim. If you
can't find such a company, you may want to purchase fraud or theft
insurance, which will compensate you for stolen amounts.

Good luck,

ECRIA
http://www.ecria.com

[Mark Rees]

> > so is there some better way to detect the fraud? my website has lost
2000

dollars as some guy are using stolen credit card and do repeat order from different ip address and different account...

Your best bet is to use a processing company that will offer you some form
of seller protection, so that when a stolen card is used, the processing
company or the credit card company (not you) will refund the victim.

Does any payment processing company offer such protection? It must be
amazingly expensive, surely?

[Tomi Holger Engdahl]

"Ben Xia" <be*@jetcom.com> writes:

Thanks for the very quick reply, I want to know the mac address of my
clients as I guess these is the best way to fight with internet fraud.
Why it would be the best way ?

The MAC address of the networking card cna be changd on many
network adapter cards.
Too sad according your answer seems no way to detect the remote mac
address... as you know to detect the ip address is not very useful... so is
there some better way to detect the fraud? my website has lost 2000 dollars
as some guy are using stolen credit card and do repeat order from different
ip address and different account...

I don't know a solution for this.

--
Tomi Engdahl (http://www.iki.fi/then/)
Take a look at my electronics web links and documents at
http://www.epanorama.net/

[Joe90]

You should also consider GeoIP to check the Country of the CC matches the
location where the details are being submitted from.
"Ben Xia" <be*@jetcom.com> wrote in message
news:CW******************@nnrp.ca.mci.com!nnrp1.uu net.ca...

Is there some way can detect MAC address with PHP? any help will be
appreciate.

Ben

[JamesB]

"Joe90" <bo******************@hotmail.com> wrote in message
news:dj**********@nwrdmz02.dmz.ncs.ea.ibs-infra.bt.com...

You should also consider GeoIP to check the Country of the CC matches the
location where the details are being submitted from.

I see the logic, but this could stop legitimate transactions. For instance
when I visit a hotel in Switzerland I pay for internet access using my UK
credit card...
James.