From ec44ae390503db7d5a270958888a5fc5448ad152 Mon Sep 17 00:00:00 2001 From: Ralf Becker Date: Mon, 22 Apr 2019 23:44:51 +0200 Subject: [PATCH] remove further private IPs from proxys (incl. space after comma) --- api/src/Session.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/api/src/Session.php b/api/src/Session.php index 1aa995075b..1ae6d3637f 100644 --- a/api/src/Session.php +++ b/api/src/Session.php @@ -1254,7 +1254,7 @@ class Session public static function getuser_ip() { return isset($_SERVER['HTTP_X_FORWARDED_FOR']) ? - preg_replace('/,10\..*$/', '', $_SERVER['HTTP_X_FORWARDED_FOR']) : + preg_replace('/, *10\..*$/', '', $_SERVER['HTTP_X_FORWARDED_FOR']) : $_SERVER['REMOTE_ADDR']; }