use only remote_addr to get user ip

filipecsweb · Feb 19, 2024 · 615357f · 615357f
1 parent 3f1c435
commit 615357f
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 11 deletions.
diff --git a/app/Common/MaintenanceMode.php b/app/Common/MaintenanceMode.php
@@ -45,7 +45,7 @@ public function fswpma_maintenance_page() {
 		if ( ! empty( wpManutencao()->settings->getOption( 'ips' ) ) ) {
 			$ips = explode( ',', wpManutencao()->settings->getOption( 'ips' ) );
 			$ips = array_map( 'trim', $ips );
-			if ( in_array( wpManutencao()->utils->getTheUserIp(), $ips ) ) {
+			if ( in_array( wpManutencao()->utils->getTheUserIp(), $ips, true ) ) {
 				return;
 			}
 		}

diff --git a/app/Common/Utils.php b/app/Common/Utils.php
@@ -29,15 +29,12 @@ public function loadTemplate( string $template_name, array $args = [] ) {
 	 * @return string
 	 */
 	public function getTheUserIp() {
-		if ( ! empty( $_SERVER['HTTP_CLIENT_IP'] ) ) {
-			$ip = $_SERVER['HTTP_CLIENT_IP'];
-		} elseif ( ! empty( $_SERVER['HTTP_X_FORWARDED_FOR'] ) ) {
-			$ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
-		} else {
-			$ip = $_SERVER['REMOTE_ADDR'];
+		$ip = '';
+		if ( ! empty( $_SERVER['REMOTE_ADDR'] ) ) {
+			$ip = sanitize_text_field( wp_unslash( $_SERVER['REMOTE_ADDR'] ) );
 		}
 
-		return $ip;
+		return $ip ?: '';
 	}
 
 	/**

diff --git a/readme.txt b/readme.txt
@@ -6,7 +6,7 @@ Tags: manutenção, maintenance, em breve, coming soon, construction, constructi
 Tested up to: 6.4
 Requires at least: 5.4
 Requires PHP: 7.4
-Stable tag: 1.0.6
+Stable tag: 1.0.7
 License: GPLv3 or later
 License URI: https://www.gnu.org/licenses/gpl-3.0.html
 

diff --git a/wordpress-manutencao.php b/wordpress-manutencao.php
@@ -5,7 +5,7 @@
  * Description: Coloque seu site em manutenção ou redirecione-o para uma URL. Administradores logados podem ver o site. É possível liberar acesso a IPs.
  * Author: Filipe Seabra
  * Author URI: https://filipeseabra.me/
- * Version: 1.0.6
+ * Version: 1.0.7
  * Text Domain: wp-manutencao
  * Domain Path: /languages/
  */
@@ -29,7 +29,7 @@
 define( 'WP_MANUTENCAO_PATH', plugin_dir_path( __FILE__ ) );
 define( 'WP_MANUTENCAO_URL', plugin_dir_url( __FILE__ ) );
 define( 'WP_MANUTENCAO_BASENAME', plugin_basename( __FILE__ ) );
-define( 'WP_MANUTENCAO_VERSION', '1.0.6' );
+define( 'WP_MANUTENCAO_VERSION', '1.0.7' );
 define( 'WP_MANUTENCAO_SLUG', 'wp-manutencao' );
 
 /**