Viewing 1 replies (of 1 total)
  • Thread Starter Matt Pramschufer

    (@mattpramschufer)

    Actually I figured it out. I needed to update the code that the developer used for finding the IP address.

    The current code

    if(isset($_SERVER["REMOTE_ADDR"])){
    		return $_SERVER["REMOTE_ADDR"];
    	}elseif(isset($_SERVER["HTTP_X_FORWARDED_FOR"])){
    		return $_SERVER["HTTP_X_FORWARDED_FOR"];
    	}elseif(isset($_SERVER["HTTP_CLIENT_IP"])){
    		return $_SERVER["HTTP_CLIENT_IP"];
    	}

    Needed to be updated to

    if ( ! empty( $_SERVER['HTTP_CLIENT_IP'] ) ) {
    		//check ip from share internet
    		return $_SERVER['HTTP_CLIENT_IP'];
    	} elseif ( ! empty( $_SERVER['HTTP_X_FORWARDED_FOR'] ) ) {
    		//to check ip is passed from proxy / load balancer
    		return $_SERVER['HTTP_X_FORWARDED_FOR'];
    	} else {
    		return $_SERVER['REMOTE_ADDR'];
    	}

    The reason, is because the developers code would always return the REMOTE_ADDR even if HTTP_X_FORWARDED_FOR was set.

Viewing 1 replies (of 1 total)
  • The topic ‘Trigger Login?’ is closed to new replies.