Date: Mon, 30 Sep 2002 19:29:43 +0300 (EEST) From: Alexandr Kovalenko <never@nevermind.kiev.ua> To: FreeBSD-gnats-submit@FreeBSD.org Subject: www/43530: [PATCH] Add also HTTP_X_FORWARDED_FOR header inclusing in cgi/dosendpr.cgi Message-ID: <200209301629.g8UGThp32546@osdn.org.ua>
next in thread | raw e-mail | index | archive | help
>Number: 43530
>Category: www
>Synopsis: [PATCH] Add also HTTP_X_FORWARDED_FOR header inclusing in cgi/dosendpr.cgi
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-www
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: update
>Submitter-Id: current-users
>Arrival-Date: Mon Sep 30 09:30:02 PDT 2002
>Closed-Date:
>Last-Modified:
>Originator: Alexandr Kovalenko
>Release: FreeBSD 4.4-RELEASE-p26 i386
>Organization:
Net.Style
>Environment:
System: FreeBSD xxx.zzz.yyy.com 4.4-RELEASE-p26 FreeBSD 4.4-RELEASE-p26 #0: Tue Aug 27 20:03:50 EEST 2002 root@xxx.zzz.yyy.com:/usr/obj/usr/src/sys/kurush i386
>Description:
dosendpr.cgi only records requesting machine's IP, but if this machine is
proxy, we won't be able to track down original poster. Appended patch resolves this problem.
>How-To-Repeat:
Look at dosendpr.cgi code.
>Fix:
Index: dosendpr.cgi
===================================================================
RCS file: /usr/home/ncvs/www/en/cgi/dosendpr.cgi,v
retrieving revision 1.8
diff -u -r1.8 dosendpr.cgi
--- dosendpr.cgi 2002/05/20 07:14:41 1.8
+++ dosendpr.cgi 2002/09/30 16:22:40
@@ -72,6 +72,7 @@
"From: $cgi_data{'originator'} <$cgi_data{'email'}>\n" .
"Subject: $cgi_data{'synopsis'}\n" .
"X-Originating-IP: $ENV{'REMOTE_ADDR'}\n" .
+ "X-Originating-Proxy-IP: $ENV{'HTTP_X_FORWARDED_FOR'}\n" .
"X-Send-Pr-Version: www-1.0\n\n" .
">Submitter-Id:\t$cgi_data{'submitterid'}\n" .
">Originator:\t$cgi_data{'originator'}\n" .
>Release-Note:
>Audit-Trail:
>Unformatted:
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-www" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200209301629.g8UGThp32546>