scratch – Blame information for rev 141

Subversion Repositories:
Rev:
Rev Author Line No. Line
141 office 1 <?php
2 /**
3 * Retrieves the best guess of the client's actual IP address.
4 * Takes into account numerous HTTP proxy headers due to variations
5 * in how different ISPs handle IP addresses in headers between hops.
6 *
7 * Source: https://gist.github.com/cballou/2201933
8 *
9 */
10 function get_ip_address() {
11 // check for shared internet/ISP IP
12 if (!empty($_SERVER['HTTP_CLIENT_IP']) && validate_ip($_SERVER['HTTP_CLIENT_IP'])) {
13 return $_SERVER['HTTP_CLIENT_IP'];
14 }
15  
16 // check for IPs passing through proxies
17 if (!empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
18 // check if multiple ips exist in var
19 if (strpos($_SERVER['HTTP_X_FORWARDED_FOR'], ',') !== false) {
20 $iplist = explode(',', $_SERVER['HTTP_X_FORWARDED_FOR']);
21 foreach ($iplist as $ip) {
22 if (validate_ip($ip))
23 return $ip;
24 }
25 } else {
26 if (validate_ip($_SERVER['HTTP_X_FORWARDED_FOR']))
27 return $_SERVER['HTTP_X_FORWARDED_FOR'];
28 }
29 }
30 if (!empty($_SERVER['HTTP_X_FORWARDED']) && validate_ip($_SERVER['HTTP_X_FORWARDED']))
31 return $_SERVER['HTTP_X_FORWARDED'];
32 if (!empty($_SERVER['HTTP_X_CLUSTER_CLIENT_IP']) && validate_ip($_SERVER['HTTP_X_CLUSTER_CLIENT_IP']))
33 return $_SERVER['HTTP_X_CLUSTER_CLIENT_IP'];
34 if (!empty($_SERVER['HTTP_FORWARDED_FOR']) && validate_ip($_SERVER['HTTP_FORWARDED_FOR']))
35 return $_SERVER['HTTP_FORWARDED_FOR'];
36 if (!empty($_SERVER['HTTP_FORWARDED']) && validate_ip($_SERVER['HTTP_FORWARDED']))
37 return $_SERVER['HTTP_FORWARDED'];
38  
39 // return unreliable ip since all else failed
40 return $_SERVER['REMOTE_ADDR'];
41 }
42  
43 /**
44 * Ensures an ip address is both a valid IP and does not fall within
45 * a private network range.
46 *
47 * Source: https://gist.github.com/cballou/2201933
48 *
49 */
50 function validate_ip($ip) {
51 if (strtolower($ip) === 'unknown')
52 return false;
53  
54 // generate ipv4 network address
55 $ip = ip2long($ip);
56  
57 // if the ip is set and not equivalent to 255.255.255.255
58 if ($ip !== false && $ip !== -1) {
59 // make sure to get unsigned long representation of ip
60 // due to discrepancies between 32 and 64 bit OSes and
61 // signed numbers (ints default to signed in PHP)
62 $ip = sprintf('%u', $ip);
63 // do private network range checking
64 if ($ip >= 0 && $ip <= 50331647) return false;
65 if ($ip >= 167772160 && $ip <= 184549375) return false;
66 if ($ip >= 2130706432 && $ip <= 2147483647) return false;
67 if ($ip >= 2851995648 && $ip <= 2852061183) return false;
68 if ($ip >= 2886729728 && $ip <= 2887778303) return false;
69 if ($ip >= 3221225984 && $ip <= 3221226239) return false;
70 if ($ip >= 3232235520 && $ip <= 3232301055) return false;
71 if ($ip >= 4294967040) return false;
72 }
73 return true;
74 }