ip_address

Versions
6 – 7: ip_address()

If Drupal is behind a reverse proxy, we use the X-Forwarded-For header instead of $_SERVER['REMOTE_ADDR'], which would be the IP address of the proxy server, and not the client's.

Return value

IP address of client machine, adjusted for reverse proxy.

▸ 12 functions call ip_address()

▾ 12 functions call ip_address()

comment_save in modules/comment/comment.module: Accepts a submission of new or changed comment content.
drupal_anonymous_user in includes/bootstrap.inc: Generates a default anonymous $user object.
flood_is_allowed in includes/common.inc: Check if the current visitor (hostname/IP) is allowed to proceed with the specified event.
flood_register_event in includes/common.inc: Register an event for the current visitor (hostname/IP) to the flood control mechanism.
poll_cancel in modules/poll/poll.module: Submit callback for poll_cancel_form
poll_load in modules/poll/poll.module: Implementation of hook_load().
poll_vote in modules/poll/poll.module: Submit handler for processing a vote
sess_write in includes/session.inc
statistics_exit in modules/statistics/statistics.module: Implementation of hook_exit().
user_block_ip_action in modules/user/user.module: Implementation of a Drupal action. Adds an access rule that blocks the user's IP address.
watchdog in includes/bootstrap.inc: Log a system message.
_drupal_bootstrap in includes/bootstrap.inc

Code

includes/bootstrap.inc, line 1190

<?php
function ip_address() {
  static $ip_address = NULL;

  if (!isset($ip_address)) {
    $ip_address = $_SERVER['REMOTE_ADDR'];
    if (variable_get('reverse_proxy', 0) && array_key_exists('HTTP_X_FORWARDED_FOR', $_SERVER)) {
      // If an array of known reverse proxy IPs is provided, then trust
      // the XFF header if request really comes from one of them.
      $reverse_proxy_addresses = variable_get('reverse_proxy_addresses', array());
      if (!empty($reverse_proxy_addresses) && in_array($ip_address, $reverse_proxy_addresses, TRUE)) {
        // If there are several arguments, we need to check the most
        // recently added one, i.e. the last one.
        $ip_address = array_pop(explode(',', $_SERVER['HTTP_X_FORWARDED_FOR']));
      }
    }
  }

  return $ip_address;
}
?>

Our proxy redirects - LVS

robpeek - Fri, 2010-02-05 15:12

Our proxy redirects a request to itself on a different port, for load balancing benefits, hence the last added ip is 127.0.0.1

The code below provides a answer to this problem, although you have to be careful when updating your install.

function ip_address() {
  static $ip_address = NULL;

  if (!isset($ip_address)) {
    $ip_address = $_SERVER['REMOTE_ADDR'];
    if (variable_get('reverse_proxy', 0) && array_key_exists('HTTP_X_FORWARDED_FOR', $_SERVER)) {
      // If an array of known reverse proxy IPs is provided, then trust
      // the XFF header if request really comes from one of them.
      $reverse_proxy_addresses = variable_get('reverse_proxy_addresses', array());
      if (!empty($reverse_proxy_addresses) && in_array($ip_address, $reverse_proxy_addresses, TRUE)) {
        // If there are several arguments, we need to check the most
        // recently added one, i.e. the last one.
        $ip_list = array_map('trim', explode(',', $_SERVER['HTTP_X_FORWARDED_FOR']));
        $ip_address = array_pop($ip_list);
	while(in_array($ip_address, $reverse_proxy_addresses)){
  			$ip_address = trim(array_pop($ip_list));
  	}
      }
    }
  }

  return $ip_address;
}