search

lesterchan / wp-polls

Adds an AJAX poll system to your WordPress blog. You can also easily add a poll into your WordPress's blog post/page.
https://wordpress.org/plugins/wp-polls/
93 stars 78 forks source link

Add check for CF-Connecting-IP header in get_ipaddress #105

Closed gabcoh closed 6 years ago

gabcoh commented 6 years ago

CF-Connecting-IP is set by clouflare to the connecting client's IP address. By prioritizing this header over other headers, it is more difficult for a client to spoof their ip and vote multiple times. https://support.cloudflare.com/hc/en-us/articles/200170986-How-does-Cloudflare-handle-HTTP-Request-headers-

gabcoh commented 6 years ago

solves #104