Databases
StackOverflow2013
Postsdbo
POGetting IPAddress via a proxy with PHP?
 

Note that there are some explanatory texts on larger screens.

plurals
  1. POGetting IPAddress via a proxy with PHP?
    primarykey
    data
    text
    <p>I run security checks on a number of AJAX calls to see if the same IP requested that I have on record.</p> <p>I used the following set of class functions to establish the IP (which can come via load balancers, hence the lengthly methodology.</p> <pre><code> private function IPMask_Match ($network, $ip) { $ip_arr = explode('/', $network); if (count($ip_arr) &lt; 2) { $ip_arr = array($ip_arr[0], null); } $network_long = ip2long($ip_arr[0]); $x = ip2long($ip_arr[1]); $mask = long2ip($x) == $ip_arr[1] ? $x : 0xffffffff &lt;&lt; (32 - $ip_arr[1]); $ip_long = ip2long($ip); return ($ip_long &amp; $mask) == ($network_long &amp; $mask); } private function IPCheck_RFC1918 ($IP) { $PrivateIP = false; if (!$PrivateIP) { $PrivateIP = $this-&gt;IPMask_Match('127.0.0.0/8', $IP); } if (!$PrivateIP) { $PrivateIP = $this-&gt;IPMask_Match('10.0.0.0/8', $IP); } if (!$PrivateIP) { $PrivateIP = $this-&gt;IPMask_Match('172.16.0.0/12', $IP); } if (!$PrivateIP) { $PrivateIP = $this-&gt;IPMask_Match('192.168.0.0/16', $IP); } return $PrivateIP; } public function getIP () { $UsesProxy = (!empty($_SERVER['HTTP_X_FORWARDED_FOR']) || !empty($_SERVER['HTTP_CLIENT_IP'])) ? true : false; if ($UsesProxy &amp;&amp; !empty($_SERVER['HTTP_CLIENT_IP'])) { $UserIP = $_SERVER['HTTP_CLIENT_IP']; } elseif ($UsesProxy &amp;&amp; !empty($_SERVER['HTTP_X_FORWARDED_FOR'])) { $UserIP = $_SERVER['HTTP_X_FORWARDED_FOR']; if (strstr($UserIP, ',')) { $UserIPArray = explode(',', $UserIP); foreach ($UserIPArray as $IPtoCheck) { if (!$this-&gt;IPCheck_RFC1918($IPtoCheck)) { $UserIP = $IPtoCheck; break; } } if ($UserIP == $_SERVER['HTTP_X_FORWARDED_FOR']) { $UserIP = $_SERVER['REMOTE_ADDR']; } } } else{ $UserIP = $_SERVER['REMOTE_ADDR']; } return $UserIP; } </code></pre> <p><strong>The Problem</strong> is I've been getting problems with users operating via a proxy. Can anyone indicate why that might be? I've used basic free proxy's online to try and emulate, but it doesn't look to be getting variable IPs or anything - so I'm not sure why this would be saying the two IPs don't match.</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PTQuestion
    1. This table or related slice is empty.
    1. USwaxical
    plurals
    1. PL
      singulars
      1. LTLinked
    2. PL
      singulars
      1. LTLinked
    3. PL
      singulars
      1. LTLinked
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. PO
      singulars
      1. PTAnswer
    2. PO
      singulars
      1. PTAnswer
    3. PO
      singulars
      1. PTAnswer
    1. VO
      singulars
      1. POGetting IPAddress via a proxy with PHP?
      1. USNilsB
      1. VTFavorite
    2. VO
      singulars
      1. POGetting IPAddress via a proxy with PHP?
      1. USwaxical
      1. VTBountyStart
    3. VO
      singulars
      1. POGetting IPAddress via a proxy with PHP?
      1. This table or related slice is empty.
      1. VTUpMod
    1. COwhat happens in your code if `$_SERVER['HTTP_X_FORWARDED_FOR']` has no `,` in it? and i don't get this part `if ($UserIP == $_SERVER['HTTP_X_FORWARDED_FOR']) { $UserIP = $_SERVER['REMOTE_ADDR']; } `
      singulars
      1. POGetting IPAddress via a proxy with PHP?
      1. USJan Prieser
    2. COGood question - in the case of no , - then it'd just leave it as HTTP_X_FORWARDED_FOR. The second question, it's saying if there's not an forwarded IP (that you get on a load balancer) - then take the REMOTE_ADDR - that's the most basic ip.
      singulars
      1. POGetting IPAddress via a proxy with PHP?
      1. USwaxical
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload