We currently check for (in order):
$_SERVER["HTTP_FORWARDED_FOR"]
$_SERVER["HTTP_X_FORWARDED_FOR"]
$_SERVER["HTTP_X_CLUSTER_CLIENT_IP"]
$_SERVER["HTTP_X_SUCURI_CLIENTIP"]
$_SERVER["HTTP_CF_CONNECTING_IP"]
$_SERVER["REMOTE_ADDR"];
Your ($_SERVER["HTTP_X_SUCURI_CLIENTIP"]) and CF are at the bottom and should only be selected when one of the "forwarded for" lines isn't used, try JUST this bit:
<?php
if(isset($_SERVER["HTTP_FORWARDED_FOR"])) {
echo("AA: ". $_SERVER["HTTP_FORWARDED_FOR"] ."<br>\n");
} elseif(isset($_SERVER["HTTP_X_FORWARDED_FOR"])) {
echo("AB: ". $_SERVER["HTTP_X_FORWARDED_FOR"] ."<br>\n");
} elseif(isset($_SERVER["HTTP_X_CLUSTER_CLIENT_IP"])) {
echo("AC: ". $_SERVER["HTTP_X_CLUSTER_CLIENT_IP"] ."<br>\n");
} elseif(isset($_SERVER["HTTP_X_SUCURI_CLIENTIP"])) {
echo("AD: ". $_SERVER["HTTP_X_SUCURI_CLIENTIP"] ."<br>\n");
} elseif(isset($_SERVER["HTTP_CF_CONNECTING_IP"])) {
echo("AE: ". $_SERVER["HTTP_CF_CONNECTING_IP"] ."<br>\n");
} else {
echo("AF: ". $_SERVER["REMOTE_ADDR"] ."<br>\n");
}
?>
I need the EXACT output from the server, feel free to blank out your IP, but I need to read
any returned input,
ESPECIALLY if it is NOT your IP address.