Proxy ip to real ip conversion

This modification is no longer available or supported.

A simple modification I did for our forum that was originally based on the Proxy Detector Hack (v3.0). Obviously, like all proxy server detection hacks, this will only work if the proxy server passes the appropiate http variables.

This hack makes the forum always use the members real ip when a proxy is detected, meaning that all existing ip functions continue to work, basically ignoring the proxy server (other than recording it's presence).

i.e.

* The real ip/host is displayed in who's online

* The real and proxy server ip's are accesible for each post, the button is red for members using a proxy.

* The real ip is searchable in the admin/mod cp, not the proxy ip.

* The real ip is bannable by admins (no moving to another proxy to avoid a ban).

etc etc.

The installation should take about 10-15 mins (4 file edits, 2 phrase changes, 1 new template, 1 sql query, 1 new image).

[Paul M]

Are you sure you have correctly done the edit to init.php and uploaded it ? - this is where those constants are defined.

[Delphiprogrammi]

Originally Posted by Paul M

Are you sure you have correctly done the edit to init.php and uploaded it ? - this is where those constants are defined.

i did edited that file but there was a typo :tired: now it works fine i tested it with a normal proxy and with an anonymous one (the hack doesn't detect this type of proxys) but that's normal nothing you or anybody else cando about it

rgds

[cyt0plas]

So what if a regular user sends the X-Forwarded for header, specifying someone else's IP? Can the user avoid bans/etc?

[Delphiprogrammi]

Originally Posted by cyt0plas

So what if a regular user sends the X-Forwarded for header, specifying someone else's IP? Can the user avoid bans/etc?

that's impossible unless you "spoof" an ip adress which isn't so easy ...

[xheliox]

Is there any way to ignore reserved private IP ranges? I have several users who show up has having 192.168.x.x or 10.0.x.x as their "real IP".

Great mod, btw..

[Paul M]

Originally Posted by xheliox

Is there any way to ignore reserved private IP ranges? I have several users who show up has having 192.168.x.x or 10.0.x.x as their "real IP".

Great mod, btw..

What exactly do you mean by "ignore them" ?

[xheliox]

Originally Posted by Paul M

What exactly do you mean by "ignore them" ?

Show the "real IP" as the proxy IP.

[Paul M]

Well I haven't tested it, but this should work ;

Find;

PHP Code:

    $proxyip = $iplist[0]; 


Add below it ;

PHP Code:

    if (preg_match("#^(127|10|172\.(1[6-9]|2[0-9]|3[0-1])|192\.168|169\.254)\.#", $proxyip)) 

    {
        $proxyip = ''; 
    } 


Obviously this won't change any existing data.

Edit: Updated for full 172 range and 127 range as per posts below.

[xheliox]

That seemed to do the trick. Thank you kindly.

Any chance you'll be adding that to your next release?

[xheliox]

PS - the range is 172.16.0.0 through 172.31.255.255.. I'm a regex moron, how would I add that range?

preg_match("#^(10|172\.[16-31]|192\.168)\.#", $proxyip))

?