Use real ip when proxy server is detected.

This modification is no longer available or supported.

This hack makes the forum always use the members real ip when a proxy is detected, meaning that all existing ip functions should continue to work, basically ignoring the proxy server (other than recording it's presence).

i.e.

* The real ip (or host) is displayed in the who's online page.
* The real and proxy server ip's are accesible for each post, the button is red for members using a proxy server.
* The real ip is searchable in the admin/mod cp (but not the proxy ip).
* The real ip can be banned by admins.

etc etc ......

Obviously this hack relies on the proxy server passing the correct http variables to allow detection. This hack is packaged as a vBulletin product.



History:

v2.12 : Template fix for px.gif.
v2.13 : Minor changes, no update necessary.

[smdani]

Two both variables take IP and his DNS name. How can I take only IP number?
I want to generate a link like this below IP Address:
http://ws.arin.net/cgi-bin/whois.pl?...=200.96.73.211

I did it modifying the phrase thread_displayproxyip, and writing:

<a href="http://ws.arin.net/cgi-bin/whois.pl?queryinput={1}">IP - Query WHOIS ARIN <br>

but generates a bad URL:
http://ws.arin.net/cgi-bin/whois.pl?...P.rima-tde.net

[FROGGYJ]

hrm do we have to update all threads or anything? cause I installed fine, but ummm nothing has changed when I click on reveal IP.

[Paul M]

Originally Posted by smdani

Two both variables take IP and his DNS name. How can I take only IP number?

You can't unless you modify the code.

Originally Posted by FROGGYJ

hrm do we have to update all threads or anything? cause I installed fine, but ummm nothing has changed when I click on reveal IP.

Nothing will change unless a proxy is detected at the time of posting, then the ip icon will be red and the extra details will be displayed if you click it.

It is not (and cannot ever be) retrospective.

[akanevsky]

Isn't proxy detection a standard in vB 3.5?
I thought I saw something like that in the source code of the freshly downloaded package.

EDIT: Yes, it is, and your hack says to replace some of that.
What is the difference between your detection and vB's detection?

EDIT: lol...

define('SESSION_IDHASH', md5($_SERVER['HTTP_USER_AGENT'] . IPADDRESS)); // this should *never* change during a session

USER AGENT never change? I don't think so. Both IPADDRESS and USER AGENT can be changed in Opera without restarting the brower :P

[Paul M]

Originally Posted by Dark Visor

Isn't proxy detection a standard in vB 3.5?

No.

Nowhere in a default vb installation will you be able to see if a person is using a proxy server, or do anything with (or even know) their real ip address.

Originally Posted by Dark Visor

EDIT: Yes, it is, and your hack says to replace some of that.
What is the difference between your detection and vB's detection?

That code (which btw is in all 3.0.x versions as well) attempts to detect the real ip (as ALT_IP) for the session hash, and that's it. It does absolutely nothing else with it whatsoever.

Originally Posted by Dark Visor

EDIT: lol...

USER AGENT never change? I don't think so. Both IPADDRESS and USER AGENT can be changed in Opera without restarting the brower :P

Not really sure what your point is, that's a Jelsoft comment, not mine. I'd like to know how you change your ip address via a browser .......

[akanevsky]

That code (which btw is in all 3.0.x versions as well) attempts to detect the real ip (as ALT_IP) for the session hash, and that's it. It does absolutely nothing else with it whatsoever.

I understand. And what is the reason you added another constant?

Not really sure what your point is, that's a Jelsoft comment, not mine. I'd like to know how you change your ip address via a browser .......

I know. Lol was directed at Jelsoft; IP can be changed via proxy that is specified within a browser.

[smdani]

You can't unless you modify the code.

I'm thinking to define a new variable and save only the ip number. How can I do it?
Paul, may you help me?

[slowhand.chen]

use https connect vbb，the real ip can't not logged。

[Paul M]

Originally Posted by smdani

I'm thinking to define a new variable and save only the ip number. How can I do it?
Paul, may you help me?

The link you use will work fine as it is, ARIN picks out the IP address and ignores the rest - the example you gave does not work because the 200.x x x range is not controlled by ARIN, it's controlled by LACNIC

[exceem]

installed and working great, excelent hack

this should be a feature of vbulletin!