Access control system description.

[fa-stable.git] / admin / db / users_db.inc

diff --git a/admin/db/users_db.inc b/admin/db/users_db.inc
index 853de471160d41845cd9890bd611b0a7579904cc..3f484639e442843993559a8a2b28e053cf0f7e96 100644 (file)
--- a/admin/db/users_db.inc
+++ b/admin/db/users_db.inc
@@ -172,31 +172,29 @@ function show_users_online()
        $timestamp=time();
        $timeout=$timestamp-$timeoutseconds;
        /*
-       This will try to find out if user is coming behind proxy server. Why is this important?
-       If you have high traffic web site, it might happen that you receive lot of traffic
-       from the same proxy server (like AOL). In that case, the script would count them all as 1 user.
+       This will find out if user is from behind proxy server. 
+       In that case, the script would count them all as 1 user.
        This function tryes to get real IP address.
-       Note that getenv() function doesn't work when PHP is running as ISAPI module
        */
-       if (getenv('HTTP_CLIENT_IP')) {
-               $ip = getenv('HTTP_CLIENT_IP');
+       if (isset($_SERVER['HTTP_CLIENT_IP'])) {
+               $ip = $_SERVER['HTTP_CLIENT_IP'];
        }
-       elseif (getenv('HTTP_X_FORWARDED_FOR')) {
-               $ip = getenv('HTTP_X_FORWARDED_FOR');
+       elseif (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) {
+               $ip = $_SERVER['HTTP_X_FORWARDED_FOR'];
        }
-       elseif (getenv('HTTP_X_FORWARDED')) {
-               $ip = getenv('HTTP_X_FORWARDED');
+       elseif (isset($_SERVER['HTTP_X_FORWARDED'])) {
+               $ip = $_SERVER['HTTP_X_FORWARDED'];
        }
-       elseif (getenv('HTTP_FORWARDED_FOR')) {
-               $ip = getenv('HTTP_FORWARDED_FOR');
+       elseif (isset($_SERVER['HTTP_FORWARDED_FOR'])) {
+               $ip = $_SERVER['HTTP_FORWARDED_FOR'];
        }
-       elseif (getenv('HTTP_FORWARDED')) {
-               $ip = getenv('HTTP_FORWARDED');
+       elseif (isset($_SERVER['HTTP_FORWARDED'])) {
+               $ip = $_SERVER['HTTP_FORWARDED'];
        }
        else {
                $ip = $_SERVER['REMOTE_ADDR'];
        }
-       
+
        // Add user to database
        db_query("INSERT INTO ".TB_PREF."useronline (timestamp, ip, file) VALUES ('". $timestamp ."','". $ip ."','". $_SERVER['PHP_SELF'] ."')");
        //Remove users that were not online within $timeoutseconds.