IPv6 breaks Login Lockdown Feature

Hi, just curios did you by any chance add an IPv6 address to the Login Whitelist tab under Brute Force settings?

No, there are no IPs (v4 or v6) there, and that feature is not turned on.
Will try it out and see what happens.

I’m not able to add an IPv6 address to the whitelist, I get this error:
2001:470:81e5::1 is not a valid ip address format.

Thank you for getting back to me. The plugin developers will investigate further your issue.

I’m not able to add an IPv6 address to the whitelist, I get this error:
2001:470:81e5::1 is not a valid ip address format.

You are running an old version of the plugin. We added IPv6 support for the whitelist feature in last release.

I only installed it 1 week ago, and it updated 3 days or so ago.
The system info tab gives me this for the AIOWPS plugin:

All In One WP Security 4.0.2 https://www.tipsandtricks-hq.com/wordpress-security-and-firewall-plugin

Also, (and I should have mentioned this) it appears that this only broke with the 4.0.2 update. When I first installed it, I was able to log in with IPv6.

Some more testing shows that it only breaks there are ip addresses in the block list.

Ok thanks for the info. I will investigate further and apply a fix if necessary.

Just updated to 4.0.4 and retested, same issue.
Let me know if you need more info.

Still busted, looks like this is the offending bit of code (in classes/wp-security-utility-ip-address.php )
/*
* Returns the first three octets of a sanitized IP address so it can used as an IP address range
*/
static function get_sanitized_ip_range($ip)
{
global $aio_wp_security;
//$ip = AIOWPSecurity_Utility_IP::get_user_ip_address(); //Get the IP address of user
$ip_range = ”;
$valid_ip = filter_var($ip, FILTER_VALIDATE_IP); //Sanitize the IP address
if ($valid_ip)
{
$ip_range = substr($valid_ip, 0 , strrpos ($valid_ip, “.”)); //strip last portion of address to leave an IP range
}
else
{
//Write log if the ‘REMOTE_ADDR’ contains something which is not an IP
$aio_wp_security->debug_logger->log_debug(“AIOWPSecurity_Utility_IP – Invalid IP received “.$ip,4);
}
return $ip_range;
}

This will not handle IPv6 addresses correctly.

Ok thanks.
I have made some changes to the code to rectify this issue.
If you would like me to send you a beta version of the plugin to try please get in touch with me using my contact form.