Administrative and Maintenance Tools - Proxy to Real IP Conversion

--------------------------------------------------------------------------------
This modification has been withdrawn.
vBulletin 4.0.x and 4.1.x are no longer supported.

For vBulletin 4.2.x please use the built in reverse proxy detection.
--------------------------------------------------------------------------------


This hack makes the forum always use the members real ip if a proxy is detected, meaning that all existing ip functions should continue to work, basically ignoring the proxy server (other than recording it's presence).

For example ;

* The real ip is displayed in the who's online page.
* The real and proxy server ip's are accesible for each post, the button is red for members using a proxy server.
* The real ip is searchable in the admin/mod cp (but not the proxy ip).
* The real ip can be banned by admins.

Note: This hack relies on the proxy server passing the correct http variables to allow detection.
If they are not passed then detection will not work. By definition, annonymous proxies do not pass on these variables.

If a proxy is detected, then a red ip icon is displayed instead of the standard one.

To install, download and unzip the files and follow the instructions in the text file.

This modification involves changes to the class_core.php file - if you upgrade your vbulletin, you must reapply those changes.
If you forget these edits, the modification will continue to work for forum posts only (v4.0.4 +).


History:

v4.0.1 : 02-Jan-2010 : Initial release for vb 4.0.0 Gold.
v4.0.2 : 04-Jan-2010 : Added check for invalid alt ip address.
v4.0.3 : 13-Jan-2010 : Minor change to cope better when people forget the class_core file edits.
v4.0.4 : 15-Jan-2010 : Further changes to process forum posts when people forget the class_core file edits.
v4.0.5 : 20-Feb-2010 : Internal update, not released.
v4.0.6 : 27-Feb-2010 : Style code updates for vB 4.0.2.
v4.0.7 : 30-Oct-2010 : Style code updated to work when css stored as files.

v4.1.0 : 04-Dec-2010 : Updated for vBulletin 4.1.x

v4.1.7.0 : 16-Oct-2011 : Updated for vBulletin 4.1.7.
v4.1.8.0 : 18-Nov-2011 : Updated for vBulletin 4.1.8.

v4.2.0.0 : 24-May-2012 : Updated for vBulletin 4.2.0.
v4.2.0.1 : 02-Jan-2015 : Updated for Cloudflare Changes.

[fly]

Originally Posted by 0verl0rd

It doesn't work with cloudflare.. helpppp

https://www.google.com/search?q=cloudflare+vbulletin

Second link.

[0verl0rd]

yeah i have seen that link already...

i also opened a ticket to cloudflare... and they are giving me those 2 options...

I already installed this add-on and the option 2 is somehow difficult because of the construction of code...



How to do this:

PHP Code:

Find: function fetch_ip() { return $_SERVER['REMOTE_ADDR']; }

replace with:

function fetch_ip() { if(isset($_SERVER['HTTP_CF_CONNECTING_IP'])) { return $_SERVER['HTTP_CF_CONNECTING_IP']; } return $_SERVER['REMOTE_ADDR']; } 


with these:

PHP Code:

 /**
* Fetches the IP address of the current visitor
*
* @return string
*/
function fetch_ip()
{
return $_SERVER['REMOTE_ADDR'];
}

/**
* Fetches an alternate IP address of the current visitor, attempting to detect proxies etc.
*
* @return string
*/
function fetch_alt_ip()
{
$alt_ip = $_SERVER['REMOTE_ADDR'];

if (isset($_SERVER['HTTP_X_FORWARDED_FOR']))
{
$altip = $_SERVER['HTTP_X_FORWARDED_FOR'];
}
else if (isset($_SERVER['HTTP_CLIENT_IP']))
{
$altip = $_SERVER['HTTP_CLIENT_IP'];
}
else if (isset($_SERVER['HTTP_FROM']))
{
$altip = $_SERVER['HTTP_FROM'];
}
else
{
$altip = false;
}

if ($altip AND $this->filter_ip($altip))
{
$alt_ip = $altip;
}

return $alt_ip;
} 


[Bubble #5]

THANK YOU for this excellent hack Paul!

[boggseric]

Paul, thanks for the hacks!

Question, I am upgrading my 3.8 forum to 4.2. the forum has quite a few posts (15mil) and modifying the post table on the uninstall of the old mod and then the install of the new version is quite a headache and server intensive.

I was looking at the code and it appears to me the only difference is that the old proxyip field was varchar(20) whereas the new one calls for varchar(15). I'm guessing modifying the product code to not drop this column wouldn't cause a problem right? Those extra 5 characters shouldn't be an issue in my opinion but my database skills are not super high.

So basically before uninstalling the old mod change the code to not drop the column and then modify the new plugin xml to not add the column. Note, I'm not asking for instruction of how to do that I can handle that part, just curious if you think this will break anything or cause problems.

[Paul M]

That sounds fine to me.

However - if you just install the new one, without uninstalling the old one, the new one will remove the old product without running the uninstall code anyway.

Same effect, less effort.

[Bubble #5]

Paul, how do we nominate this modification for the MOTM? I saw no link or directions...

[djbaxter]

Originally Posted by Bubble #5

Paul, how do we nominate this modification for the MOTM? I saw no link or directions...

It's currently in the running for the Mod of the Month so all you need to do is go vote for it: https://vborg.vbsupport.ru/portal.php or https://vborg.vbsupport.ru/showthread.php?t=300696

[Paul M]

LOL, so it is. I never noticed that.

[Disco_Dave]

Originally Posted by Cybex

We fixed it ourselves by editing the class_core.php bit:

// Detect ALL.
       if ($registry->ipaddress == $registry->alt_ip)
       {
           define('PROXYIP',''); 
       }
       else
       {
           $proxy = true;
           define('PROXYIP',$registry->ipaddress);
       }
       
       if ($proxy)
       {
           define('ALT_IP', $this->ipaddress);
           define('IPADDRESS', $_SERVER['HTTP_X_FORWARDED_FOR']);
       }
       else
       {
           define('IPADDRESS', $_SERVER['HTTP_X_FORWARDED_FOR']);
           define('ALT_IP', $this->alt_ip);
       }

Now the proxy details aren't written properly, but that's not that important for me. At least I see the real IP addresses now.

Where would I place this in the class_core.php??

Dave

[boggseric]

Originally Posted by Paul M

That sounds fine to me.

However - if you just install the new one, without uninstalling the old one, the new one will remove the old product without running the uninstall code anyway.

Same effect, less effort.

Yes, you are right. That does sound much easier. Thanks!