class-ip.php — NinjaFirewall (WP Edition) – Advanced Security Plugin and Firewall trunk

ninjafirewall / lib / class-ip.php

ninjafirewall / lib Last commit date

class-ip.php

85 lines

1	<?php
2	/*
3	+=====================================================================+
4	\| _ _ _ _ _____ _ _ _ \|
5	\| \| \ \| (_)_ __ (_) __ _\| ___(_)_ __ _____ ____ _\| \| \| \|
6	\| \| \\| \| \| '_ \ \| \|/ _` \| \|_ \| \| '__/ _ \ \ /\ / / _` \| \| \| \|
7	\| \| \|\ \| \| \| \| \|\| \| (_\| \| _\| \| \| \| \| __/\ V V / (_\| \| \| \| \|
8	\| \|_\| \_\|_\|_\| \|_\|/ \|\__,_\|_\| \|_\|_\| \___\| \_/\_/ \__,_\|_\|_\| \|
9	\| \|__/ \|
10	\| (c) NinTechNet Limited ~ https://nintechnet.com/ \|
11	+=====================================================================+
12	*/
13
14	if ( class_exists('NinjaFirewall_IP') ) {
15	return;
16	}
17
18	class NinjaFirewall_IP {
19
20	/**
21	* Return an IP address and its type (public/private).
22	* $nfw_options is only used here for compatibility with the WP+ version.
23	*/
24	public static function check_ip( $nfw_options ) {
25	/**
26	* It could have been defined by the firewall, if already loaded.
27	*/
28	if ( defined('NFW_REMOTE_ADDR') ) {
29	return;
30	}
31
32	/**
33	* Some command line cron jobs may return an 'Undefined array key REMOTE_ADDR' warning.
34	*/
35	if (! isset( $_SERVER['REMOTE_ADDR'] ) ) {
36	$_SERVER['REMOTE_ADDR'] = '127.0.0.1';
37	}
38
39	if ( strpos( $_SERVER['REMOTE_ADDR'], ',') !== false ) {
40	$matches = array_map('trim', @ explode(',', $_SERVER['REMOTE_ADDR'] ) );
41	foreach( $matches as $match ) {
42	if ( filter_var( $match, FILTER_VALIDATE_IP ) ) {
43	define('NFW_REMOTE_ADDR', $match );
44	break;
45	}
46	}
47	}
48	if (! defined('NFW_REMOTE_ADDR') ) {
49	/**
50	* Last hope.
51	*/
52	define('NFW_REMOTE_ADDR', htmlspecialchars( $_SERVER['REMOTE_ADDR'] ) );
53	}
54
55	/**
56	* Check if it's a private address.
57	*/
58	if (filter_var( NFW_REMOTE_ADDR, FILTER_VALIDATE_IP,
59	FILTER_FLAG_NO_PRIV_RANGE \| FILTER_FLAG_NO_RES_RANGE ) ) {
60
61	define('NFW_REMOTE_ADDR_PRIVATE', false );
62	} else {
63	define('NFW_REMOTE_ADDR_PRIVATE', true );
64	}
65	}
66
67
68	/**
69	* Anonymize an IP address by hidding it last 3 characters, unless it's a prive IP.
70	*/
71	public static function anonymize_ip( $ip, $nfw_options ) {
72
73	if (! empty( $nfw_options['anon_ip'] ) && NFW_REMOTE_ADDR_PRIVATE === false ) {
74
75	return substr( $ip, 0, -3 ) .'xxx';
76	}
77
78	return $ip;
79	}
80
81	}
82
83	// =====================================================================
84	// EOF
85