IPv6 addresses blocked from posting

  • Resolved awtx

    (@awtx)


    8 years, 11 months ago

    Apache/2.4.10 (Debian) with IPv4 and IPv6 addresses
    PHP 5.6.17-0+deb8u1
    WordPress v4.4.2
    Formidable Pro v2.0.23
    Akismet v3.8

    Any form submission from an IPv6 address is automatically rejected as spam. Submissions from IPv4 address work as expected.

    In the Akismet debug logs I noticed the IPv4 addresses are captured correctly in the variable “&user_ip=”.

    However, IPv6 addresses are not replicated. They are missing the letters and colons from the address.

    My first guess is that the address check is failing due to the partial IPv6 address extracted from the REMOTE_ADDR server variable.

    This seems like a flashback to
    https://core.trac.www.ads-software.com/ticket/4579

    https://www.ads-software.com/plugins/akismet/

Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author Christopher Finke

    (@cfinke)

    When I look at the plugin code (version 3.1.8), this is how we’re collecting the IP address:

    $comment['user_ip'] = self::get_ip_address();

    self::get_ip_address() looks like this:

    public static function get_ip_address() {
    return isset( $_SERVER['REMOTE_ADDR'] ) ? $_SERVER['REMOTE_ADDR'] : null;
    }

    There’s no sanitation done on that parameter before it’s sent to the API, so either $_SERVER['REMOTE_ADDR'] is borked, another plugin is interfering, or there’s a subtle bug somewhere in Akismet.

    Can you email finke@automattic.com with your blog URL? I can walk you through some debugging steps to figure out where things are going wrong.

    Thread Starter awtx

    (@awtx)

    Thanks, sent email.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘IPv6 addresses blocked from posting’ is closed to new replies.