remove HTTP_X_FORWARDED_FOR in ip check

cornernote · Apr 19, 2018 · dcfb9e1 · dcfb9e1
1 parent 1ef5d94
commit dcfb9e1
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/email/components/EmailAccessFilter.php b/email/components/EmailAccessFilter.php
@@ -25,7 +25,8 @@ protected function preFilter($filterChain)
         /** @var EmailModule $email */
         $email = $app->getModule('email');
         $user = $app->getUser();
-        $ip = isset($_SERVER['HTTP_X_FORWARDED_FOR']) ? $_SERVER['HTTP_X_FORWARDED_FOR'] : Yii::app()->request->userHostAddress;
+        //$ip = isset($_SERVER['HTTP_X_FORWARDED_FOR']) ? $_SERVER['HTTP_X_FORWARDED_FOR'] : Yii::app()->request->userHostAddress;
+        $ip = Yii::app()->request->userHostAddress;
         if (!$this->allowUser($email, $user) || !$this->allowIp($email, $ip)) {
             throw new CHttpException(403, 'You are not allowed to access this page.');
         }