IP Confirmation

[Anon]

Is there a way to confirm the originating IP address when my site is initially looked at?

I want to confirm a specific address and allow access otherwise redirect.

Thanks...

[Anon]

You can try the $REMOTE_ADDR variable which will give you an IP Adress... but beware, if any users go through proxy servers this is bound to fail or not work as you expect.

Tim Frank

[Anon]

I was under the impression that that command would only give the IP of the user's address and not another address that is coming to your address.

[Anon]

huh? Hmm...you stated your question backwards 🙂 I think...hmm.

Let me help ya out. $REMOTE_ADDR will work just fine. However, if someone comes from a network that proxies their users to the outside world (which would mean your web site), then you will get the IP address of the remote network's web server (proxy) and not the IP address of the person actually connecting to your page. There is absolutely no conventional means for you to get that person's IP address if he connects to you this way. But if he doesn't (to reiterate) then using $REMOTE_ADDR should work fine for you.

[Anon]

i have a similar problem... and i dont know what to do when a visitor is using a proxy in the other side...

[Anon]

this forum was made in php, right? from where comes that ip on my messages? it is the ip of my proxy server.. in my scripts, the variable $REMOTE_ADDR shows my proxy ip 192.168.....
i want to do the something that forum does! some ideia?

[Anon]

Try getenv('REMOTE_HOST')... the code used in Phorum is

$ip = getenv('REMOTE_HOST');
if(!$ip){
$ip =getenv 'REMOTE_ADDR');
}

See if that does what you need.

Tim Frank

[Anon]

Thanks for your answer Tim,

I used the script below:

$ip = getenv('REMOTE_HOST');
echo("remote host: $ip<br>");
$ip = getenv('REMOTE_ADDR');

echo("remote addr: $ip<br>");

And it returns:

remote host:

remote addr: 192.168.1.2

Something wrong in my php configuration?
Is the fact i am using my proxy server to execute the php script?
I was try many things.. without sucess.

[Anon]

nope...this is exactly what it should do. The fact that your 192.168.1.2 address doesn't resolve is why you see in the remote addr: area. So what you have there works just fine. Unless of course I am misunderstanding what you want.

[Anon]

hummm
I want someone tell me: 'it works fine.. you are getting that adress (192.168..) cause you are using your proxy server as php server', or something like that.
If it's as simple as this, i have no problem.. but how can I be sure?
That scrip (2 messages ago) is at
http://avalon.sma.zaz.com.br/demos/log/teste.php
Anyone that uses proxy, plese, connect there and tell me (here or at [e-mail]) if it returns your server ip or your proxy.

thank you.

[Anon]

Ok, either you, or we, are misunderstanding exactly what your problem is. Where is your test server located? To me it seems that your test server is "internal" to your network 192.168.x.x and does not ACTUALLY go out through your ISP's proxy server. HENCE, that is why that IP would show in your test environment.
When you post on PHPBuilder you ARE going through your ISP's proxy server so that would be the "last" IP address PHPBuilder sees and hence grabs that.
AFAIK, there is NO WAY to find out the IP originating behind a proxy server.

There is nothing else we can help you with. It is working the way it is suppose to $REMOTE_HOST gives you the resolved name and $REMOTE_ADDR gives you the IP address. I tested my forum setup through an anoymous proxy (www.anonymizer.com) and that is the address listed beside the posts. If I don't use it it is my IP address.

Tim Frank

[Anon]

sorry for get all your patience... 🙂
i understood rigth now that THERE IS NO proxy ip.. the unique thing that exists on the INTERNET is real ips...
i cant test this myself cause everything was inside a little intranet.

i really sorry, and thank you all.

[Anon]

I used to be with an ISP (UUnet) whose webspace provided logging. I don't know how it did it but the logs always showed the real IP's, even if the user was going through several proxies. The logs would look something like:

index.shtml;24/11/00;16:35:42;MSIE 5.5;127.0.0.1,158.124.156.72,128.64.32.16

Obviously you have th efile, time and browser info, but at the end would be the IP's with the first one listed being the real IP followed by a comma and the proxies.

At first I thought it was perhaps sensing my IP because the ISP hosted both the webspace and the proxy, but as the web logs built up it was obvious that every user from any ISP was having their real IP logged as well as that of the proxy.

I've never been able to find another host that could do this, or information on how it is done.

[Anon]

Some proxies use the following HTTP header to trace IP's :

X_FORWARDED_FOR: IP0,IP1,...

The first one is the user's IP and each proxy adds its own.

[Anon]

I tried using print "$X_FORWARDED_FOR" but it just gave an undefined variable error even though I used a cache that used to work with the old ISP.

Could it be down to the way the server's configured?

[Anon]

The PHP variable is $HTTP_X_FORWARDED_FOR.
Try and let us know if it works...

[Anon]

Yes!

It works now, thankyou very much!