asp.net - HttpContext.Current.Request.ServerVariables["REMOTE_ADDR"] Security -
all,i have stand-alone epayment service implemented asp.net web service order management system , , using cybersource payment service, responsiblity of web service interface intergate cybersource order management system, have poor knowledge in security of payment service. , wasn't aware of important issue should care .so far, did work on .below code looks like, please review , comments.
//somsip ip of order management system. string somsip = "xx.xx.xx.xx"; //get client ip string sip=httpcontext.current.request.servervariables["remote_addr"]; //make sure request order management system. otherwise invalid. if (sip.equals(somsip)) { //process payment request } else { //return fail message. }
but not sure if there possibility forge ip of client. , appreciated if can give me idea or solution build security of epayment . thanks.
Comments
Post a Comment