Development Environment Setup

[eluser]Pygon[/eluser]
MadZad: The actual $_SERVER variable cannot be spoofed, but any items obtained from the client should be considered unreliable as the user-client can spoof its header values. $_SERVER['SERVER_NAME'] is obtained from the server, not the client, so this is reliable.

The following are unreliable:
HTTP_ACCEPT, HTTP_ACCEPT_CHARSET, HTTP_ACCEPT_ENCODING, HTTP_ACCEPT_LANGUAGE, HTTP_CONNECTION, HTTP_HOST, HTTP_REFERER, HTTP_USER_AGENT, REMOTE_ADDR, REMOTE_HOST, and REMOTE_PORT

GSV:
php_uname is reliable for determining the server OS registered hostname, but not the hostname provided by the webserver (such as a virtualhost).