The mail sent to reset the password doesn't contain the IP address from which the request was made

[dbitouze]

BUG/PROBLEM REPORT (OR OTHER COMMON ISSUE)

What I did:

Create a Plone 5 site, add a user and test the password reset.

What I expect to happen:

The mail sent should contain an IP address at the end of the sentence "Request made from IP address"

What actually happened:

The mail sent doesn't contain the IP address at the end of the sentence "Request made from IP address": it looks like the variable ${ipaddress} gives nothing.

What version of Plone/ Addons I am using:

• Plone 5.2.0 (5207)
• CMF 2.4.0
• Zope 4.1.1
• Python 3.7.3 (default, Apr 4 2019, 08:55:10) [GCC 8.3.1 20190329]
• PIL 6.1.0 (Pillow)
• WSGI : Allumé
• Serveur : waitress 1.3.0

[tkimnguyen]

Denis, what was the URL of the website?

[dbitouze]

Hi Kim. It was a local URL: http://localhost:8083/Plone/

[vincentfretin]

Products/CMFPlone/browser/login/templates/mail_password_template.pt uses

<tal:i18n                                                                       
     i18n:translate="mailtemplate_tracking_information"                         
     tal:condition="isAnon">                                                    
If you didn't expect to receive this email, please ignore it. Your password has not been changed.
Request made from IP address <tal:i18n tal:define="host request/HTTP_X_FORWARDED_FOR|request/REMOTE_ADDR"
          tal:content="host"                                                    
          i18n:name="ipaddress" />                                              
</tal:i18n>

So it uses HTTP_X_FORWARDED_FOR (you should have it behind apache or nginx) or fallback to REMOTE_ADDR if request/HTTP_X_FORWARDED_FOR gives an exception. This probably never happen? Can you try something like this?

<tal:i18n tal:define="host python:request.HTTP_X_FORWARDED_FOR or request.REMOTE_ADDR"

[vincentfretin]

Did you test my suggestion @dbitouze ?

[vincentfretin]

I tested, what I said fix the issue. I have now 127.0.0.1 locally.

[dbitouze]

@vincentfretin Sorry for not having tested your suggestion. No time for this right now but if you noticed the issue and afterwards fixed it, I guess we can close this issue :)