Seems like he wants to use the visitor's IP and browser, to submit a form in an external site.
First check if they have CSRF tokens, a validation that their site is not in an iFrame, CloudFront, or any other security measures. Then it may be achievable with JavaScript as well.
|