From 4d480b36ea4b503ed997b1b9c60c433b5508e4aa Mon Sep 17 00:00:00 2001 From: Thomas Bruederli <thomas@roundcube.net> Date: Wed, 17 Jul 2013 02:04:15 -0400 Subject: [PATCH] Respect HTTP_X_FORWARDED_FOR and HTTP_X_REAL_IP variables for session IP check --- program/lib/Roundcube/rcube_utils.php | 15 +++++++++++++++ 1 files changed, 15 insertions(+), 0 deletions(-) diff --git a/program/lib/Roundcube/rcube_utils.php b/program/lib/Roundcube/rcube_utils.php index 6c3bd21..cf87ded 100644 --- a/program/lib/Roundcube/rcube_utils.php +++ b/program/lib/Roundcube/rcube_utils.php @@ -666,6 +666,21 @@ /** + * Returns the real remote IP address + * + * @return string Remote IP address + */ + public static function remote_addr() + { + foreach (array('HTTP_X_FORWARDED_FOR','HTTP_X_REAL_IP','REMOTE_ADDR') as $prop) { + if (!empty($_SERVER[$prop])) + return $_SERVER[$prop]; + } + + return ''; + } + + /** * Read a specific HTTP request header. * * @param string $name Header name -- Gitblit v1.9.1