Ask a Question related to PHP Development, Design and Development.
-
sniper@php.net #1
#24515 [Fbk->NoF]: $_SERVER[remote_addr] different to $remote_addr
ID: 24515
Updated by: [email]sniper@php.net[/email]
Reported By: phpbug at easihosting dot co dot uk
-Status: Feedback
+Status: No Feedback
Bug Type: Scripting Engine problem
Operating System: linux
PHP Version: 4.3.3RC1
New Comment:
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Open". Thank you.
Previous Comments:
------------------------------------------------------------------------
[2003-07-10 11:35:08] [email]sniper@php.net[/email]
Apache 1.3.6 ?!?! The latest and best version is Apache 1.3.27. There
are couple of security bugs even in that version you use, UPGRADE it
first! (also openssl!)
Also, you use configure options you shouldn't be using:
'--with-regex=system' <-- never use!
'--enable-mm=shared' <-- it's "--with-mm" and it can't be shared.
And these don't even exist:
'--enable-track-vars'
'--enable-mbstr-enc-trans'
------------------------------------------------------------------------
[2003-07-10 09:42:45] phpbug at easihosting dot co dot uk
Configure:
'./configure' '--prefix=/usr' '--with-apxs=/usr/sbin/apxs'
'--with-gettext=/usr' '--with-config-file-path=/etc/httpd'
'--with-exec-dir=/usr/bin' '--with-zlib' '--enable-magic-quotes'
'--with-regex=system' '--with-ttf' '--with-db' '--with-gdbm'
'--enable-mbstring' '--enable-mbstr-enc-trans' '--enable-track-vars'
'--with-gd' '--enable-wddx=shared' '--enable-mm=shared' '--enable-xml'
'--enable-ftp' '--disable-debug' '--with-libdir=/usr/lib'
'--with-pgsql=shared' '--with-pdflib=shared' '--with-jpeg-dir=/usr/lib'
'--with-png-dir=/usr/lib' '--enable-inline-optimization'
'--enable-gd-native-ttf' '--with-imap'
Apache/1.3.6 (Unix) PHP/4.3.3RC2-dev mod_perl/1.21 mod_ssl/2.2.8
OpenSSL/0.9.2b
------------------------------------------------------------------------
[2003-07-09 18:14:21] [email]sniper@php.net[/email]
Which webserver are you using?
What was the configure line used?
------------------------------------------------------------------------
[2003-07-07 08:30:40] phpbug at easihosting dot co dot uk
What information do you require? I have read the guidelines, and I seem
to have adeared to them, short, simple and not missing anything out.
Did you not understand my bug report or do you think it is not a bug
but a feature?
Everytime I get a visitor to my site it sends me an email. It is
reporting that they are visiting a different site to what they are.
This other site is also hosted on the same server.
I have not found a way to easily reproduce this, I just have to wait
and read the emails that report both $_SERVER array and registered
global variables.
------------------------------------------------------------------------
[2003-07-06 17:50:44] phpbug at easihosting dot co dot uk
Description:
------------
When register_globals is on one would expect the registered globals to
be the same values as the variables accessed through the global
arrays.
$remote_addr doesn't always return the IP of the visitor to the site
but the IP of another visitor to another site on the same server.
$server_name doesn't always return the host name for the site being
visited, but that of another site being hosted on the same server.
Reproduce code:
---------------
echo '$SERVER_NAME';
echo " ";
echo "$SERVER_NAME";
echo "<br>";
echo '$_SERVER[SERVER_NAME]';
echo " ";
echo "$_SERVER[SERVER_NAME]";
echo "<br>";
Expected result:
----------------
$SERVER_NAME [url]www.p800.co.uk[/url]
$_SERVER[SERVER_NAME] [url]www.p800.co.uk[/url]
Actual result:
--------------
$SERVER_NAME [url]www.p800.co.uk[/url]
$_SERVER[SERVER_NAME] [url]www.symbos.co.uk[/url]
------------------------------------------------------------------------
--
Edit this bug report at [url]http://bugs.php.net/?id=24515&edit=1[/url]
sniper@php.net Guest
-
cgi.remote_addr problem
I have a website that is IP restricted and being a nice person I have setup my own error message thats abit more user friendly. ... -
$ENV{'REMOTE_ADDR'}
Dan Muey wrote: I'm no security expert, but how can these be spoofed? They don't come from the request headers, but are derived from the TCP... -
#24515 [Opn->Fbk]: $_SERVER[remote_addr] different to $remote_addr
ID: 24515 Updated by: sniper@php.net Reported By: phpbug at easihosting dot co dot uk -Status: Open +Status: ... -
#24515 [Fbk->Opn]: $_SERVER[remote_addr] different to $remote_addr
ID: 24515 User updated by: phpbug at easihosting dot co dot uk Reported By: phpbug at easihosting dot co dot uk -Status: ... -
#24553 [NEW]: Error with $_SERVER["REMOTE_ADDR"]
From: darren at aoitalk dot com Operating system: OSX 10.2.6 PHP version: 4.3.3RC1 PHP Bug Type: HTTP related Bug...



Reply With Quote

