IPA behind proxy

[Mhaxx]

Is there a way to retrieve IP address behind a proxy?

Mhaxx

[Chris Morris]

Mhaxx <mh***@despamme d.com> writes:

Is there a way to retrieve IP address behind a proxy?

Sometimes.

$_SERVER['X_FORWARDED_FO R'] works on some of them, not on others.

--
Chris

[Bert]

On Fri, 05 Sep 2003 10:10:25 +0200, Mhaxx <mh***@despamme d.com> wrote:

Is there a way to retrieve IP address behind a proxy?

this is what I use (doesn't always work:

if ($_SERVER['HTTP_X_FORWARD ED_FOR']) {
$ipaddress = $_SERVER['HTTP_X_FORWARD ED_FOR']." (through proxy
".$_SERVER['REMOTE_ADDR'].")";
}
else {
$ipaddress = $_SERVER['REMOTE_ADDR'];
}
?>

[Mhaxx]

>this is what I use (doesn't always work:

There isn't $_SERVER['HTTP_X_FORWARD ED_FOR'] in my proxy headers! :-((

Are there other ways?

Mhaxx

[Martin Lucas-Smith]

Are there other ways?

Try this, which I picked up from someone else:
# Function to obtain the IP address behind cache
function getRealIp () {

# Obtain the server addresses
#!# These potentially require an isSet
$HCIP = $_SERVER['HTTP_CLIENT_IP '];
$HXF = $_SERVER['HTTP_X_FORWARD ED'];
$HXFF = $_SERVER['HTTP_X_FORWARD ED_FOR'];
$RMAD = $_SERVER['REMOTE_ADDR'];

# Logic to ascertain which to use
$ipAddress = ($HCIP != '') ? $HCIP :
($HXF != '') ? $HXF :
($HXFF != '') ? $HXFF :
($RMAD != '') ? $RMAD : '';

# Return the result
return $ipAddress;
}

Martin

[Mhaxx]

>Try this, which I picked up from someone else:

Nothing, I always get the IP address of my proxy!

I think that if my proxy doesn't add IPA visitors header into its
headers, I can't obtain IPA visitors.. is it right?

Mhaxx

[Chris Morris]

Mhaxx <mh***@despamme d.com> writes:

Try this, which I picked up from someone else:

I think that if my proxy doesn't add IPA visitors header into its
headers, I can't obtain IPA visitors.. is it right?

Make a PHP page solely containing <?php phpinfo(); ?> View it through
the proxy. Do a search on the page for your real IP. If you can't
find it, the proxy doesn't send it, and no, you can't obtain it. If
you can find it, you should have a big hint as to what the variable
it's in is called.

--
Chris

[Mhaxx]

>the proxy. Do a search on the page for your real IP. If you can't

find it, the proxy doesn't send it, and no, you can't obtain it.

I can't see the "real" IPA in phpinfo().

I have no other ways, right? :-°°(

Mhaxx

[Chris Morris]

Mhaxx <mh***@despamme d.com> writes:

the proxy. Do a search on the page for your real IP. If you can't
find it, the proxy doesn't send it, and no, you can't obtain it.

I can't see the "real" IPA in phpinfo().

I have no other ways, right? :-°°(

Well, you could ask the user to type their IP into a box on the page.
It might be possible to use Javascript to grab it client-side and put
it into a hidden field, but that's going to be unreliable at best, and
might _really_ annoy some people (if someone's going out of their way
to keep their IP hidden, trying to find it is going to make them
leave, fast).

Looks like you'll just have to give up on this one.

What do you need the IP for, anyway?

--
Chris

[Mhaxx]

>Well, you could ask the user to type their IP into a box on the page.

No no..

What do you need the IP for, anyway?

To trace accesses to my web site, and (maybe) to trace visitors IPA
when they buy something in my merchant site.. I know what you think:
it's not a good idea, because you can change your IPA if you want, so
it's not a secure way..

Mhaxx