extern/egroupware_official
1
0
Fork 0
mirror of https://github.com/EGroupware/egroupware.git synced 2024-12-27 09:09:07 +01:00
Code Issues Packages Projects Releases Wiki Activity

remove further private IPs from proxys

Browse Source
This commit is contained in:
Ralf Becker 2019-04-22 23:20:41 +02:00
parent aad4db1617
commit 4622c28bb2
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
api/src/Session.php
View File

@ -1260,11 +1260,16 @@ class Session
/**
* Get the ip address of current users
*
* We remove further private IPs (from proxys) as they invalidate user
* sessions, when they change because of multiple proxys.
*
* @return string ip address
*/
public static function getuser_ip()
{
return isset($_SERVER['HTTP_X_FORWARDED_FOR']) ? $_SERVER['HTTP_X_FORWARDED_FOR'] : $_SERVER['REMOTE_ADDR'];
return isset($_SERVER['HTTP_X_FORWARDED_FOR']) ?
preg_replace('/,10\..*$/', '', $_SERVER['HTTP_X_FORWARDED_FOR']) :
$_SERVER['REMOTE_ADDR'];
}
/**