Explorar o código

WEB/fixed nginx log notices

Dmitry Naumov-Socolov %!s(int64=9) %!d(string=hai) anos
pai
achega
b103640a0f
Modificáronse 1 ficheiros con 18 adicións e 1 borrados
  1. 18 1
      web/inc/main.php

+ 18 - 1
web/inc/main.php

@@ -11,7 +11,24 @@ require_once(dirname(__FILE__).'/i18n.php');
 
 
 // Saving user IPs to the session for preventing session hijacking
-$user_combined_ip = $_SERVER['REMOTE_ADDR'] .'|'. $_SERVER['HTTP_CLIENT_IP'] .'|'. $_SERVER['HTTP_X_FORWARDED_FOR'] .'|'. $_SERVER['HTTP_X_FORWARDED'] .'|'. $_SERVER['HTTP_FORWARDED_FOR'] .'|'. $_SERVER['HTTP_FORWARDED'];
+$user_combined_ip = $_SERVER['REMOTE_ADDR'];
+
+if(isset($_SERVER['HTTP_CLIENT_IP'])){
+    $user_combined_ip .=  '|'. $_SERVER['HTTP_CLIENT_IP'];
+}
+if(isset($_SERVER['HTTP_X_FORWARDED_FOR'])){
+    $user_combined_ip .=  '|'. $_SERVER['HTTP_X_FORWARDED_FOR'];
+}
+if(isset($_SERVER['HTTP_FORWARDED_FOR'])){
+    $user_combined_ip .=  '|'. $_SERVER['HTTP_FORWARDED_FOR'];
+}
+if(isset($_SERVER['HTTP_X_FORWARDED'])){
+    $user_combined_ip .=  '|'. $_SERVER['HTTP_X_FORWARDED'];
+}
+if(isset($_SERVER['HTTP_FORWARDED'])){
+    $user_combined_ip .=  '|'. $_SERVER['HTTP_FORWARDED'];
+}
+
 
 if(!isset($_SESSION['user_combined_ip'])){
     $_SESSION['user_combined_ip'] = $user_combined_ip;