#24515 [Opn->Fbk]: $_SERVER[remote_addr] different to $remote_addr

ID: 24515 Updated by: sniper@php.net Reported By: phpbug at easihosting dot co dot uk -Status: Open +Status: Feedback Bug Type: Scripting Engine problem Operating System: linux PHP Version: 4.3.3RC1 New Comment: Apache 1.3.6 ?!?! The latest and best version is Apache 1.3.27. There are couple of security bugs even in that version you use, UPGRADE it first! (also openssl!) Also, you use configure options you shouldn't be using: '--with-regex=system' <-- never use! '--enable-mm=shared' <-- it's "--with-mm" and it can't be shared. And these don't even exist: '--enable-track-vars' '--enable-mbstr-enc-trans' Previous Comments: ------------------------------------------------------------------------ [2003-07-10 09:42:45] phpbug at easihosting dot co dot uk Configure: './configure' '--prefix=/usr' '--with-apxs=/usr/sbin/apxs' '--with-gettext=/usr' '--with-config-file-path=/etc/httpd' '--with-exec-dir=/usr/bin' '--with-zlib' '--enable-magic-quotes' '--with-regex=system' '--with-ttf' '--with-db' '--with-gdbm' '--enable-mbstring' '--enable-mbstr-enc-trans' '--enable-track-vars' '--with-gd' '--enable-wddx=shared' '--enable-mm=shared' '--enable-xml' '--enable-ftp' '--disable-debug' '--with-libdir=/usr/lib' '--with-pgsql=shared' '--with-pdflib=shared' '--with-jpeg-dir=/usr/lib' '--with-png-dir=/usr/lib' '--enable-inline-optimization' '--enable-gd-native-ttf' '--with-imap' Apache/1.3.6 (Unix) PHP/4.3.3RC2-dev mod_perl/1.21 mod_ssl/2.2.8 OpenSSL/0.9.2b ------------------------------------------------------------------------ [2003-07-09 18:14:21] sniper@php.net Which webserver are you using? What was the configure line used? ------------------------------------------------------------------------ [2003-07-07 08:30:40] phpbug at easihosting dot co dot uk What information do you require? I have read the guidelines, and I seem to have adeared to them, short, simple and not missing anything out. Did you not understand my bug report or do you think it is not a bug but a feature? Everytime I get a visitor to my site it sends me an email. It is reporting that they are visiting a different site to what they are. This other site is also hosted on the same server. I have not found a way to easily reproduce this, I just have to wait and read the emails that report both $_SERVER array and registered global variables. ------------------------------------------------------------------------ [2003-07-06 17:50:44] phpbug at easihosting dot co dot uk Description: ------------ When register_globals is on one would expect the registered globals to be the same values as the variables accessed through the global arrays. $remote_addr doesn't always return the IP of the visitor to the site but the IP of another visitor to another site on the same server. $server_name doesn't always return the host name for the site being visited, but that of another site being hosted on the same server. Reproduce code: --------------- echo '$SERVER_NAME'; echo " "; echo "$SERVER_NAME"; echo "<br>"; echo '$_SERVER[SERVER_NAME]'; echo " "; echo "$_SERVER[SERVER_NAME]"; echo "<br>"; Expected result: ---------------- $SERVER_NAME www.p800.co.uk $_SERVER[SERVER_NAME] www.p800.co.uk Actual result: -------------- $SERVER_NAME www.p800.co.uk $_SERVER[SERVER_NAME] www.symbos.co.uk ------------------------------------------------------------------------ -- Edit this bug report at http://bugs.php.net/?id=24515&edit=1