Site seeing through proxy?

I was trying to cause an SQL error in a site just now by replacing a member id code with a ' in their "view our members" page. I was naturaly doing this under the cloaking of a proxy server which I checked out at an "show my ip" site. I apeared to be hosted in Turkey and I'm definetly not in Turkey.

Anyhow, I did my little scout attack and I got an error page stating an IP adress, totaly different from my Proxy adress. It also said my ip and browser information was stored and sent to the admin and ISP, etc,etc and that kind of ****. I checked out the strange IP just to be sure and it turned out to be my REAL IP.

WTF? How did this site know my IP? :xx::xx::xx:

did u enable it…

Maybe it was a transparent proxy, :-\. Should've gotten an anonymous proxy.

Do you have Java enabled in your browser ? Since if I remember correctly there is some Java code that can check the real IP adress, which most likely is the reason why they got your real Ip adress.

Syphax wrote: Anyhow, I did my little scout attack and I got an error page stating an IP adress, totaly different from my Proxy adress.

… And you're sure it was your real IP? It could have been the server's IP ;)