]> git.immae.eu Git - github/shaarli/Shaarli.git/commit - application/http/HttpUtils.php
Add trusted IPs in config and try to ban forwarded IP on failed login 623/head
authorArthurHoaro <arthur@hoa.ro>
Wed, 3 Aug 2016 08:36:47 +0000 (10:36 +0200)
committerArthurHoaro <arthur@hoa.ro>
Wed, 3 Aug 2016 08:36:47 +0000 (10:36 +0200)
commit50d179183810a7b719bc10da2b9c4a95fd9dddee
treee669db360950025b4b6534075e940f532b0f00f3
parentc7a42ab1d9b21bf53cd30bc57b57789716c8711b
Add trusted IPs in config and try to ban forwarded IP on failed login

  * Add a new settings (which needs to be manually set): `security.trusted_proxies`
  * On login failure, if the `REMOTE_ADDR` is in the trusted proxies, try to retrieve the forwarded IP in headers.
  * If found, the client address is added in ipbans, else we do nothing.

Fixes #409
application/HttpUtils.php
index.php
tests/HttpUtils/GetIpAdressFromProxyTest.php [new file with mode: 0644]