hi, I am using sucuri website firewall. But I could see that users have IP and and hostname of sucuri. How can I see original IP? I contacted sucuri team and they provided me this url:
https://docs.sucuri.net/website-firewall/troubleshooting/same-ip-for-all-users/
any option bro?
Just a guess, no way to test it, but IP is detected in QueryString.php. You can try this from the link you posted -
if(isset($_SERVER['HTTP_X_SUCURI_CLIENTIP']))
{
$_SERVER["REMOTE_ADDR"] = $_SERVER['HTTP_X_SUCURI_CLIENTIP'];
}
// Clean the request variables - add html entities to GET and slashes if magic_quotes_gpc is Off.
function cleanRequest()
Backup the file first.
I added before php close at the end but it doesn't work.
You can't just stick code anywhere. Try adding it where I posted.
Sorry, but I also pasted code before
// Clean the request variables - add html entities to GET and slashes
But still same IP.
You can echo $_SERVER['HTTP_X_SUCURI_CLIENTIP'] to see if it returns a value, otherwise can't be much help as I'm not running the firewall. Only other thing I can think of is go to https://sucuri.net/ and see if they can help.