Sucuri WAF Fix?

Hi @shawaj ,

Basically you need to look at the X-Forwarded-For HTTP header too, because that will be set when using a proxy like Cloudflare.

Here’s the relevant part of our code. Part of it is abstracted away so you can’t use it as is, but it should give you a good idea.

/**
 * Get the IP address of the visitor. Takes proxies into account.
 *
 * @return string
 */
public function get_client_ip() {
   $headers = ( function_exists( 'apache_request_headers' ) ) ? apache_request_headers() : $this->server->all();

   if ( array_key_exists( 'X-Forwarded-For', $headers ) && filter_var( $headers['X-Forwarded-For'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 ) ) {
      return $headers['X-Forwarded-For'];
   }

   if ( array_key_exists( 'HTTP_X_FORWARDED_FOR', $headers ) && filter_var( $headers['HTTP_X_FORWARDED_FOR'], FILTER_VALIDATE_IP, FILTER_FLAG_IPV4 ) ) {
      return $headers['HTTP_X_FORWARDED_FOR'];
   }

   return $this->server->get( 'REMOTE_ADDR', '' );
}

Hope that helps, good luck!