入力ページへのリクエストを送信したIPと実際にデータを送信したIPが違っていたらエラーにしたい

その他

[https://www.websequencediagrams.com/cgi-bin/cdraw?lz=dGl0bGUgcmVxdWVzdCBmcm9tIHNhbWUgaXAgCgpVQS0-YXBwOgAYBwphcHAtPnNlc3Npb246aXAKAAQHAB8GABgGVUE6aW5wdXQgZm9ybQA4CVVSTAAvDgA-ByBpZAA3DmlwAF8GYXBwOmNoZWNrAIEGCApub3RlIHJpZ2h0IG9mIGFwcDogSWYgYWNjZXB0ZWQgaXAgaXMgbm90AIE2CWluIACBJAcsIHJldHVybiBlcnJvciBwYWdlLgCBJQkAFAdicmVhayB3ZWIgc2l0ZQCCAwZVUkwK&s=napkin:image=https://www.websequencediagrams.com/cgi-bin/cdraw?lz=dGl0bGUgcmVxdWVzdCBmcm9tIHNhbWUgaXAgCgpVQS0-YXBwOgAYBwphcHAtPnNlc3Npb246aXAKAAQHAB8GABgGVUE6aW5wdXQgZm9ybQA4CVVSTAAvDgA-ByBpZAA3DmlwAF8GYXBwOmNoZWNrAIEGCApub3RlIHJpZ2h0IG9mIGFwcDogSWYgYWNjZXB0ZWQgaXAgaXMgbm90AIE2CWluIACBJAcsIHJldHVybiBlcnJvciBwYWdlLgCBJQkAFAdicmVhayB3ZWIgc2l0ZQCCAwZVUkwK&s=napkin]

かんがえちゅう

あれこれCSRF対策のトークンじゃね

title request from same ip

UA->app:request app->session:ip session->app: app->UA:input form UA->app:URL app->session:session id session->app:ip app->app:check same ip note right of app: If accepted ip is not same ip in session, return error page. app->UA:return break web site from URL