sucuri Same IP

[sirfpsycho]

hi, I am using sucuri website firewall. But I could see that users have IP and and hostname of sucuri. How can I see original IP? I contacted sucuri team and they provided me this url:
https://docs.sucuri.net/website-firewall/troubleshooting/same-ip-for-all-users/

[sirfpsycho]

any option bro?

[Sir Osis of Liver]

Just a guess, no way to test it, but IP is detected in QueryString.php.  You can try this from the link you posted -

Code Select Expand



if(isset($_SERVER['HTTP_X_SUCURI_CLIENTIP']))
{
    $_SERVER["REMOTE_ADDR"] = $_SERVER['HTTP_X_SUCURI_CLIENTIP'];
}

// Clean the request variables - add html entities to GET and slashes if magic_quotes_gpc is Off.
function cleanRequest()



Backup the file first.

[sirfpsycho]

I added before php close at the end but it doesn't work.

[Sir Osis of Liver]

You can't just stick code anywhere.  Try adding it where I posted.

[sirfpsycho]

Sorry, but I also pasted code before
// Clean the request variables - add html entities to GET and slashes

But still  same IP.

[Sir Osis of Liver]

You can echo $_SERVER['HTTP_X_SUCURI_CLIENTIP'] to see if it returns a value, otherwise can't be much help as I'm not running the firewall.  Only other thing I can think of is go to https://sucuri.net/ and see if they can help.