[TYPO3-core] RFC: Fix bug #7397: Proxy servers replace REMOTE_ADDR with their own IP

Dmitry Dulepov [typo3] dmitry at typo3.org
Wed Feb 20 11:47:52 CET 2008


Hi!

Martin Kutschker wrote:
> But this cannot happen. HTTP_X_FORWARDED_FOR is only accessed if 
> REMOTE_ADDRESS matches an IP that *you* have configured. This isn't 
> about some fancy proxies that might come into play somewhere, but about 
> your own or your ISP's proxy.

Hm, I thought it was general feature, for every visitor from the world. But if it is that specific, then yes, you are right, we can use local addresses as well. But feature becomes very limited.

-- 
Dmitry Dulepov
TYPO3 core team
Web: http://typo3bloke.net/
Skype: callto:liels_bugs
"Nothing is impossible. There are only limits to our knowledge"


More information about the TYPO3-team-core mailing list