View Issue Details

IDProjectCategoryView StatusLast Update
0001277OXID eShop (all versions)4. ------ eShop Core -------public2012-12-10 13:42
Reporterd3 Assigned To 
PrioritynormalSeverityminorReproducibilityalways
Status resolvedResolutionfixed 
Product Version4.1.5 revision 21618 
Fixed in Version4.1.6 revision 22740 
Summary0001277: shop returns more than a single IP as User-Remote-IP
DescriptionWe use oxUtilsServer::getRemoteAddress() in some modules to sent Client-IP to external services.
In some cases we got from this method strings like this:
"123.456.789.123, 127.0.0.1"

Here we found an explanation:
http://www.dyndnsservices.com/supp/viewtopic.php?f=7&p=12

Please check the result of $_SERVER["HTTP_X_FORWARDED_FOR"] as a valid IP-adress.
TagsNo tags attached.
Theme
BrowserAll
PHP Version5.2.6
Database Version5.0.33

Activities

dainius.bigelis

2009-09-03 10:46

reporter   ~0001619

@Developer: please check from the source code, if this $_SERVER["HTTP_X_FORWARDED_FOR"] is used in eshop source code.
If yes - implement additional check for correct IP returned.

sarunas_valaskevicius

2009-09-16 17:07

reporter   ~0001761

fixed in remote ip getter - returns just user ip, ignoring proxy