3 * Functions for dealing with proxies
9 * Extracts the XFF string from the request header
10 * Note: headers are spoofable
12 * @deprecated in 1.19; use $wgRequest->getHeader( 'X-Forwarded-For' ) instead.
15 function wfGetForwardedFor() {
16 wfDeprecated( __METHOD__
, '1.19' );
18 return $wgRequest->getHeader( 'X-Forwarded-For' );
22 * Returns the browser/OS data from the request header
23 * Note: headers are spoofable
25 * @deprecated in 1.18; use $wgRequest->getHeader( 'User-Agent' ) instead.
28 function wfGetAgent() {
29 wfDeprecated( __METHOD__
, '1.18' );
31 return $wgRequest->getHeader( 'User-Agent' );
35 * Work out the IP address based on various globals
36 * For trusted proxies, use the XFF client IP (first of the chain)
38 * @deprecated in 1.19; call $wgRequest->getIP() directly.
42 wfDeprecated( __METHOD__
, '1.19' );
44 return $wgRequest->getIP();
48 * Checks if an IP is a trusted proxy providor.
49 * Useful to tell if X-Fowarded-For data is possibly bogus.
50 * Squid cache servers for the site are whitelisted.
55 function wfIsTrustedProxy( $ip ) {
56 global $wgSquidServers, $wgSquidServersNoPurge;
58 $trusted = in_array( $ip, $wgSquidServers ) ||
59 in_array( $ip, $wgSquidServersNoPurge );
60 wfRunHooks( 'IsTrustedProxy', array( &$ip, &$trusted ) );
65 * Forks processes to scan the originating IP for an open proxy server
66 * MemCached can be used to skip IPs that have already been scanned
68 function wfProxyCheck() {
69 global $wgBlockOpenProxies, $wgProxyPorts, $wgProxyScriptPath;
70 global $wgMemc, $wgProxyMemcExpiry, $wgRequest;
73 if ( !$wgBlockOpenProxies ) {
77 $ip = $wgRequest->getIP();
80 $mcKey = wfMemcKey( 'proxy', 'ip', $ip );
81 $mcValue = $wgMemc->get( $mcKey );
82 $skip = (bool)$mcValue;
86 $title = SpecialPage
::getTitleFor( 'Blockme' );
87 $iphash = md5( $ip . $wgProxyKey );
88 $url = wfExpandUrl( $title->getFullURL( 'ip='.$iphash ), PROTO_HTTP
);
90 foreach ( $wgProxyPorts as $port ) {
91 $params = implode( ' ', array(
92 escapeshellarg( $wgProxyScriptPath ),
93 escapeshellarg( $ip ),
94 escapeshellarg( $port ),
95 escapeshellarg( $url )
97 exec( "php $params >" . wfGetNull() . " 2>&1 &" );
100 $wgMemc->set( $mcKey, 1, $wgProxyMemcExpiry );