支付宝请求来源ip验证

class IpUtils {
     public static String getIpAddr(HttpServletRequest request) {
            String ip = request.getHeader("X-Forwarded-For");
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
                ip = request.getHeader("Proxy-Client-IP");
            }
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
                ip = request.getHeader("WL-Proxy-Client-IP");
            }
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
                ip = request.getHeader("HTTP_CLIENT_IP");
            }
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
                ip = request.getHeader("HTTP_X_FORWARDED_FOR");
            }
            if (ip == null || ip.length() == 0 || "unknown".equalsIgnoreCase(ip)) {
                ip = request.getRemoteAddr();
            }
            return ip;
        }
}

 

2：检查服务器配置（以下为参考检查方向）
      DNS解析，是否能够解析支付宝IP。支付宝IP范围是：
      121.0.26.0/23（IP范围：121.0.26.1----121.0.27.254）
      110.75.128.0/19（IP范围：110.75.128.1——110.75.159.254）
      115.124.16.0/24（IP范围：115.124.16.1——115.124.16.254）

 

http://club.alipay.com/simple/?t10745707.html

http://blog.csdn.net/songylwq/article/details/7701718