News:

SMF 2.1.4 has been released! Take it for a spin! Read more.

Main Menu

sucuri Same IP

Started by sirfpsycho, November 04, 2019, 11:52:18 PM

Previous topic - Next topic

sirfpsycho

hi, I am using sucuri website firewall. But I could see that users have IP and and hostname of sucuri. How can I see original IP? I contacted sucuri team and they provided me this url:
https://docs.sucuri.net/website-firewall/troubleshooting/same-ip-for-all-users/


sirfpsycho


Sir Osis of Liver

Just a guess, no way to test it, but IP is detected in QueryString.php.  You can try this from the link you posted -



if(isset($_SERVER['HTTP_X_SUCURI_CLIENTIP']))
{
    $_SERVER["REMOTE_ADDR"] = $_SERVER['HTTP_X_SUCURI_CLIENTIP'];
}

// Clean the request variables - add html entities to GET and slashes if magic_quotes_gpc is Off.
function cleanRequest()



Backup the file first.
Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

sirfpsycho

I added before php close at the end but it doesn't work.

Sir Osis of Liver

You can't just stick code anywhere.  Try adding it where I posted.
Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

sirfpsycho

Sorry, but I also pasted code before
// Clean the request variables - add html entities to GET and slashes

But still  same IP.

Sir Osis of Liver

You can echo $_SERVER['HTTP_X_SUCURI_CLIENTIP'] to see if it returns a value, otherwise can't be much help as I'm not running the firewall.  Only other thing I can think of is go to https://sucuri.net/ and see if they can help.

Ashes and diamonds, foe and friend,
 we were all equal in the end.

                                     - R. Waters

Advertisement: