PHP & MySQL: IP addresses like 0.0.7.102

Asked Jun 11 '13 at 20:21

Active Jun 11 '13 at 20:21

Viewed 205 times

I have a a bit of code in my PHP which tries to get the user's IP address:

// Test if it is a shared client
if (! empty($_SERVER['HTTP_CLIENT_IP'])) {
    $userIP = $_SERVER['HTTP_CLIENT_IP'];
}
// Is it a proxy address?
elseif (! empty($_SERVER['HTTP_X_FORWARDED_FOR'])) {
    $userIP = $_SERVER['HTTP_X_FORWARDED_FOR'];
}
else {
    $userIP = $_SERVER['REMOTE_ADDR'];
}

Then I store $userIP in a MySQL table using the INET_ATON() function to convert the string to an integer. I can retrieve this value using MySQL's INET_NTOA() function.

It works perfectly most of the time. However, sometimes I get an IP like 0.0.7.102, for example.

I know these functions don't work with IPv6, but could this problem be caused by something else? Are there a lot of people using IPv6 already? How do I deal with this?

Thanks!

asked Jun 11 '13 at 20:21

Alexandre R. Janini

What is the input when you get that output? – George Cummins Jun 11 '13 at 20:25
2

If ipv6 is the problem. Take a look here http://stackoverflow.com/questions/6964143/storing-ipv6-addresses-in-mysql – tlenss Jun 11 '13 at 20:26
@GeorgeCummins, since this happens very seldom and I only noticed it today, I don't know what the input is (what PHP's `$_SERVER` variable is returning). I'd have to write a log function to find out... If you mean the integer stored in my table, it is `1894`. Other resolved IPs usually are 10 digits long... – Alexandre R. Janini Jun 11 '13 at 20:34
Please keep in mind that the X-Forwarded-For header can be spoofed trivially, and you should *not* trust it. – Jeremy Visser Jun 11 '13 at 22:18
Make sure the field you are storing the IP on your MySQL is `int unsigned` – Prix Jun 12 '13 at 01:15
@Prix, yep, that's what I'm using. Thanks! – Alexandre R. Janini Jun 12 '13 at 17:06

PHP & MySQL: IP addresses like 0.0.7.102

0 Answers0