[wp-trac] Re: [WordPress Trac] #9235: Extract real IP behind a load balancer

WordPress Trac wp-trac at lists.automattic.com
Wed May 20 16:44:44 GMT 2009


#9235: Extract real IP behind a load balancer
-------------------------------+--------------------------------------------
 Reporter:  Denis-de-Bernardy  |       Owner:  Denis-de-Bernardy
     Type:  enhancement        |      Status:  accepted         
 Priority:  normal             |   Milestone:  2.8              
Component:  Optimization       |     Version:  2.7              
 Severity:  normal             |    Keywords:  has-patch commit 
-------------------------------+--------------------------------------------

Comment(by ryan):

 From what I've been told, you can't rely on HTTP_X_FORWARDED_FOR being set
 to something sane.  This should be enabled only when you are sure the host
 uses HTTP_X_FORWARDED_FOR and uses it correctly.  If we build this into
 core, we would probably need a USE_FORWARDED_IP flag that users can define
 in wp-config.php.

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/9235#comment:10>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list