note 76737 deleted from reserved.variables by felipe

Note Submitter: mathiasrav at gmail dot com ---- Based on dlyaza's snippet posted at 22-Oct-2006 12:33, here's getip() which gets the IP, first checking some known custom proxy headers for validity and then falling back to REMOTE_ADDR if none are found/match. <?php function getip() { static $ip = false; if ($ip !== false) return $ip; foreach (array('HTTP_CLIENT_IP', 'HTTP_X_FORWARDED_FOR', 'HTTP_X_FORWARDED', 'HTTP_FORWARDED_FOR', 'HTTP_FORWARDED', 'REMOTE_ADDR') as $aah) { if (!isset($_SERVER[$aah])) continue; $curip = $_SERVER[$aah]; $curip = explode('.', $curip); if (count($curip) !== 4) break; // If they've sent at least one invalid IP, break out foreach ($curip as &$sup) if (($sup = intval($sup)) < 0 or $sup > 255) break 2; $curip_bin = $curip[0] << 24 | $curip[1] << 16 | $curip[2] << 8 | $curip[3]; foreach (array( // hexadecimal ip ip mask array(0x7F000001, 0xFFFF0000), // 127.0.*.* array(0x0A000000, 0xFFFF0000), // 10.0.*.* array(0xC0A80000, 0xFFFF0000), // 192.168.*.* ) as $ipmask) { if (($curip_bin & $ipmask[1]) === ($ipmask[0] & $ipmask[1])) break 2; } return $ip = $curip; } return $ip = $_SERVER['REMOTE_ADDR']; } ?>