search

calzoneman / sync

Node.JS Server and JavaScript/HTML Client for synchronizing online media
Other
1.45k stars 235 forks source link

Delete account: record correct IP in audit log #885

Closed calzoneman closed 3 years ago

calzoneman commented 3 years ago

req.ip will be 127.0.0.1 for reverse proxied requests: https://github.com/calzoneman/sync/blob/3.0/src/web/routes/account/delete-account.js#L71

It should be req.realIP like here: https://github.com/calzoneman/sync/blob/3.0/src/web/account.js#L129-L130