1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

How to determine browser type and version?

Discussion in 'General Scripting Chat' started by mikeholt, Sep 27, 2014.

  1. mikeholt

    mikeholt Newbie

    Joined:
    Sep 25, 2014
    Messages:
    2
    Likes Received:
    0
    Usually, we check the user agent of http request header for the browser type and version.

    Is there any other ways to verify it? People can write some script to simulate the http request with the custom header.

    I want to ensure the traffic is from real browser. Is it possible? THX~
     
  2. fatboy

    fatboy Elite Member

    Joined:
    Aug 13, 2008
    Messages:
    1,618
    Likes Received:
    3,227
    Occupation:
    Retired
    Location:
    Old Peoples Home
    I think it will be easier to look at the IP address over the UA. I know most of the bots I build lately use some of the latest useragents, so I would assume most people do.

    There are some obvious UA that are bots / search engines but run of the mill bots and scripts may cause you problems.

    Even using the IP is basic - do a reverse look up, if the IP comes back to a residential type address then it could be human (or a bot net). If it goes to a server IP in a DC then its probably a bot.

    It would be a tough one to spot in my opinion - you could look at the IP, the UA, the timezone of the machine and see if it looks real.
     
  3. jazzc

    jazzc Moderator Staff Member Moderator Jr. VIP

    Joined:
    Jan 27, 2009
    Messages:
    2,468
    Likes Received:
    10,148
    No, everything can be faked, even if you go with elaborate client side verifications.
     
  4. tommyhot

    tommyhot Newbie

    Joined:
    Sep 30, 2014
    Messages:
    19
    Likes Received:
    13
    Occupation:
    Black market
    Home Page:
    Basically you need to check all these fields, but it's still not 100% bullet proof as jazzc said:

    IP
    UA
    X_HTTP_FORWARDED_FOR (most of the proxies send this header, so if it's sent there's a big chance your traffic is not genuine)
     
  5. member8200

    member8200 Regular Member

    Joined:
    Aug 9, 2014
    Messages:
    469
    Likes Received:
    33
    i agree with you, everything can be faked now. :)