Add ability to detect real developer IP on remote server

Hello guys!

Tracy is awesome & very esthetic! But unfortunately it does not detect real ip-addreses of developer on remote host, if server is behind the proxy.

I had such problem on the remote server of my hosting provider: $_SERVER[‘REMOTE_ADDR’] was changed on each request. And the code below did not show Tracy on remote server:

// exit( $_SERVER['REMOTE_ADDR'] ); // uncomment to see ip-address
$developerIp = '92.55.170.174';
\Tracy\Debugger::enable($developerIp);

To solve the problem, I inspected the $_SERVER to find the real IP. And later I found a good function on stackoverflow.com and slightly modified it. The code below is dirty solution but it works for me:

$developerIp = '92.55.175.209';
$userIp = getRealIp();

//exit($userIp); // uncomment to see ip-address

$debugMode =  $userIp === $developerIp ? \Tracy\Debugger::DEVELOPMENT : \Tracy\Debugger::DETECT;
\Tracy\Debugger::enable($debugMode);

And this the function to get real IP:
(Please, check if it is right and settles the most of cases?)

function getRealIp()
	{
		$proxyHeaders = [
			'CLIENT_IP',
			'FORWARDED',
			'FORWARDED_FOR',
			'FORWARDED_FOR_IP',
			'HTTP_CLIENT_IP',
			'HTTP_FORWARDED',
			'HTTP_FORWARDED_FOR',
			'HTTP_FORWARDED_FOR_IP',
			'HTTP_PC_REMOTE_ADDR',
			'HTTP_PROXY_CONNECTION',
			'HTTP_VIA',
			'HTTP_X_CLUSTER_CLIENT_IP',
			'HTTP_X_FORWARDED',
			'HTTP_X_FORWARDED_FOR',
			'HTTP_X_FORWARDED_FOR_IP',
			'HTTP_X_IMFORWARDS',
			'HTTP_XROXY_CONNECTION',
			'VIA',
			'X_FORWARDED',
			'X_FORWARDED_FOR',

		];

		// check is there some proxy header?
		foreach ($proxyHeaders as $proxyHeader)
		{
			if (!isset($_SERVER[$proxyHeader])) {
				continue;
			}
			$IP = $_SERVER[$proxyHeader];

			// extract 1-st IP (it's real) from comma-list
			// for example: [HTTP_X_FORWARDED_FOR] => 92.55.170.174, 66.102.9.80
			if (strpos($IP, ',')) {
				list($IP) = explode(',', $IP);
			}

			// cut out the port number
			if (strpos($IP, ':')) {
				list($IP) = explode(':', $IP);
			}

			// check is valid IP
			if (filter_var($IP, FILTER_VALIDATE_IP)) {
				return $IP;
			}
		}

		// return standart IP property if no proxy was found
		return $_SERVER['REMOTE_ADDR'];
	}

I suggest to add this function to Tracy\Debugger (or maybe in Nette\Http\Request ?) , and use it from Tracy\Debugger::detectDebugMode method.

Last edited by Slava.Aurim (2016-08-13 15:26)