Bug in the IP Plugin???

[cmendla]

I was testing a form out. I have the emails send the IP and user agent. The ip and agent that I saw was not from me but from a previous robot get.

email sent (from the form) Thu 3/13/2014 10:06 PM

Data in the email

Fabrik Referrer:
User agent: Mozilla/5.0 (compatible; MJ12bot/v1.4.4; http://www.majestic12.co.uk/bot.php?+)
Fabrik Internal ID: 108
Time-Date: 2014-03-13
IP: 192.187.115.242

However, that was NOT my ip or user agent.

I checked the logs.

I could see the entries from where I submitted the form

98.114.213.44 - - [13/Mar/2014:20:06:06 -0600] "GET /images/General%20Landing%20page.jpg HTTP/1.1" 200 78427 "http://www.bcsbc.com/form-confirmation?isMambot=1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36"
98.114.213.44 - - [13/Mar/2014:20:06:07 -0600] "GET /favicon.ico HTTP/1.1" 302 241 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36"
98.114.213.44 - - [13/Mar/2014:20:06:15 -0600] "POST /form-confirmation HTTP/1.1" 200 206 "http://www.bcsbc.com/form-confirmation?isMambot=1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36"
98.114.213.44 - - [13/Mar/2014:20:06:16 -0600] "GET /brochure-request-confirmation?isMambot=1 HTTP/1.1" 200 5803 "http://www.bcsbc.com/form-confirmation?isMambot=1" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36"
98.114.213.44 - - [13/Mar/2014:20:06:18 -0600] "GET /favicon.ico HTTP/1.1" 302 241 "-" "Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/33.0.1750.146 Safari/537.36"

I did see an entry from a few moments earlier that seems to be where the plugin got it's info from

220.181.108.145 - - [13/Mar/2014:20:07:31 -0600] "GET / HTTP/1.1" 403 1583 "-" "Mozilla/5.0 (compatible; Baiduspider/2.0; +http://www.baidu.com/search/spider.html)"

IOW, it appears that the plugin grabbed the ip and user agent of the spider hitting the page, not the ip and user agent of my form submisision.

I'm not sure if this was a one time quirk or if it is a true bug.

 

[cheesegrits]

We just get the IP from the server's environment variables:

$data[$element->name] = $_SERVER['REMOTE_ADDR'];

... so if it's wrong, it's an issue with your httpd / PHP setting REMOTE_ADDR wrong.

--hugh

 

[woznyp]

ip starting from 192.x.x.x is usually used in local network, so maybe that is a problem

 

[cheesegrits]

Nope - only the 192.168.x.x network is reserved for non-routed local use. That 192.187.115.242 IP belongs to wholesaleinternet.net, and is a standard routable IP.

-- hugh