Closed maroux closed 9 years ago
User's real ip is present in HTTP_X_FORWARDED_FOR, if they are behind a proxy or a reverse proxy.
HTTP_X_FORWARDED_FOR
This is not something that gargoyle should handle and can be done insecurely. Either a middleware should be rewriting that into REMOTE_ADDR, or your proxy should do it, such as nginx with the real_ip module.
User's real ip is present in
HTTP_X_FORWARDED_FOR
, if they are behind a proxy or a reverse proxy.