Proxy ip to real ip conversion

This modification is no longer available or supported.

A simple modification I did for our forum that was originally based on the Proxy Detector Hack (v3.0). Obviously, like all proxy server detection hacks, this will only work if the proxy server passes the appropiate http variables.

This hack makes the forum always use the members real ip when a proxy is detected, meaning that all existing ip functions continue to work, basically ignoring the proxy server (other than recording it's presence).

i.e.

* The real ip/host is displayed in who's online

* The real and proxy server ip's are accesible for each post, the button is red for members using a proxy.

* The real ip is searchable in the admin/mod cp, not the proxy ip.

* The real ip is bannable by admins (no moving to another proxy to avoid a ban).

etc etc.

The installation should take about 10-15 mins (4 file edits, 2 phrase changes, 1 new template, 1 sql query, 1 new image).

[Paul M]

Originally Posted by Eagle Creek

(huh? im really confused... when I asked the same question about, uuhm, 8 months ago people said to me "no that isn't possible". Maybe I'm confussing some hacks with each other! THX ANYWAY!)

You must have asked this about another hack - it was one of the reasons I developed this version. The real ip is extracted and assigned to the standard vB ipaddess static variable - this is what vB then uses in all it's ip related functions (wol, sessions, banning, ip searching etc).

[sv1cec]

Paul M,

I just installed your hack, but is there anyway to test it? I am sorry if this has been posted before, I skipped through some of the pages and didn't see a way to test it.

Rgds and many thanks

[Paul M]

You're not showing as having it installed

The only test is to post via a proxy server (one that passes on the correct http headers). If you PM me a test account I can post on your forum - my ISP is ntl in the uk - who route all http traffic through such proxy servers. I will be here for about 15 mins, and then back again in a few hours.

[MickDoneDee]

Another option is to set up your browser with a temporary proxy address and then login to your site and make a post.

Get a free proxy address from http://www.freeproxy.ru/download/lists/goodproxy.txt

Go to your browser Internet Options in the Tools menu and select the Connections tab. Click the LAN settings button and tick the Proxy Server box and type in the address and port number. Click Okay and Apply. Now when you logon to your site you should see that proxy address in WOL and get a red icon when you post.

When the test is finished remove the proxy address from your browser.

All of the above presumes you don't already have a proxy address via your ISP as Paul does.

[sv1cec]

Originally Posted by Paul M

You're not showing as having it installed

I know, LoL, I just wanted to test it first. OK, OK, I'll click install now.

My site is: http://forum.m1911.org

Just register under the name Paul M and post something in the Test Forum here:

http://forum.m1911.org/forumdisplay.php?f=85

Thanks, let's see what it does.

[sv1cec]

Neat, it works, thanks Paul M, nice hack.

Now let's wait for any ... offenders!

If I want to see who has used a proxy IP instead of a normal one, can I create a report which will compare the two columns in post? From what I read, if proxyip is not null, and the ipaddress is different than the proxyip, this meaans that this user is using a proxy to log in, right?

[Paul M]

Originally Posted by sv1cec

If I want to see who has used a proxy IP instead of a normal one, can I create a report which will compare the two columns in post? From what I read, if proxyip is not null, and the ipaddress is different than the proxyip, this meaans that this user is using a proxy to log in, right?

You would have to make your own report or sql query to do this, but yes, if proxy is not null, and ip <> proxy then they have come in via a proxy server. In fact, if proxy is not null, it should never equal the real ip, that would be a seriously screwed set-up.

[sv1cec]

Thank you Sir, that's what I intended to do, create an Admin report. When I have it, I'll post it here, with your permission of course.

It looks as if this is a powerful tool for the admins, again, well done.

[Paul M]

Originally Posted by sv1cec

Thank you Sir, that's what I intended to do, create an Admin report. When I have it, I'll post it here, with your permission of course.

Feel free.

[bigdog829]

Clicks install