logo
Welcome to our new AbleCommerce forums. As a guest, you may view the information here. To post to this forum, you must have a registered account with us, either as a new user evaluating AbleCommerce or an existing user of the application. For all questions related to the older version of Gold and earlier, please go to AbleCommerce Gold forum. Please use your AbleCommerce username and password to Login. New Registrations are disabled.

Notification

Icon
Error
Incorrect Customer IP - when using Cloudflare
Options
Go to last post Go to first unread
Previous Topic Next Topic
ray22901031  
#1 Posted : Friday, October 22, 2021 7:03:48 PM(UTC)
ray22901031

Rank: Advanced Member

Groups: Authorized User, Developers
Joined: 2/17/2019(UTC)
Posts: 909

Thanks: 3 times
Was thanked: 15 time(s) in 15 post(s)
Using 9.0.4

Where in the code is Ablecommerce acquiring the customer IP?

It appears that the code is returning REMOTE_ADDR when it should be returning Cf-Connecting-IP. The REMOTE_ADDR will only return the Cloudflare IPs, not the true customer IP.

This is problematic for us for many reasons, especially since this information is also being sent to financial institutions for approval.

I am not certain if this would classify as a bug, but I wanted to bring it up to your attention.

Many thanks
Back to top

Wanna join the discussion?! Login to your AbleCommerce Forums forum account. New Registrations are disabled.
Back to top  
ray22901031  
#2 Posted : Monday, October 25, 2021 5:41:22 AM(UTC)
ray22901031

Rank: Advanced Member

Groups: Authorized User, Developers
Joined: 2/17/2019(UTC)
Posts: 909

Thanks: 3 times
Was thanked: 15 time(s) in 15 post(s)
Support, any feedback on this - thanks
Back to top
Katie S  
#3 Posted : Wednesday, October 27, 2021 5:06:43 PM(UTC)
Katie S

Rank: Advanced Member

Groups: System, Administrators, Developers, Registered, HelpDesk
Joined: 10/29/2018(UTC)
Posts: 472

Thanks: 4 times
Was thanked: 34 time(s) in 33 post(s)
Well, that's a good question! Let me see if I can get a developer to respond. Thanks
Thanks for your support!

Katie
Secure eCommerce Software and Hosting
Back to top
ray22901031  
#4 Posted : Wednesday, October 27, 2021 5:13:30 PM(UTC)
ray22901031

Rank: Advanced Member

Groups: Authorized User, Developers
Joined: 2/17/2019(UTC)
Posts: 909

Thanks: 3 times
Was thanked: 15 time(s) in 15 post(s)
Back to top
mazhar  
#5 Posted : Thursday, October 28, 2021 12:57:10 PM(UTC)
mazhar

Rank: Administration

Groups: Admin, Administrators, HelpDesk, System, Authorized User, Developers, Registered
Joined: 10/5/2018(UTC)
Posts: 175

Thanks: 8 times
Was thanked: 17 time(s) in 15 post(s)
Are you taking about the remote IP information stored with payment transactions? If YES then probably its being used in the payment provider codes. The Cf-Connecting-IP would work only on a website running behind cloud flare.
Perhaps, you should intercept the post-checkout event, find the real IP address and then update the order transactions to use the correct IP address.
Back to top
ray22901031  
#6 Posted : Thursday, October 28, 2021 1:04:33 PM(UTC)
ray22901031

Rank: Advanced Member

Groups: Authorized User, Developers
Joined: 2/17/2019(UTC)
Posts: 909

Thanks: 3 times
Was thanked: 15 time(s) in 15 post(s)
I'm referring to the IP that not only is being sent to the payment processors, but also the IP that is being shown and stored in the customer information section in Ablecommerce.

My question is, where exactly in the code does this process of grabbing that IP start?

Thank you
Back to top
mazhar  
#7 Posted : Thursday, October 28, 2021 1:29:25 PM(UTC)
mazhar

Rank: Administration

Groups: Admin, Administrators, HelpDesk, System, Authorized User, Developers, Registered
Joined: 10/5/2018(UTC)
Posts: 175

Thanks: 8 times
Was thanked: 17 time(s) in 15 post(s)
When the checkout executes, Request.UserHostAddress is used to store with the order.
Back to top
Users browsing this topic
Guest
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

Privacy Policy | Powered by YAF.NET 2.2.4.14 | YAF.NET © 2003-2024, Yet Another Forum.NET
This page was generated in 0.192 seconds.