Merge pull request #352 from fuhrysteve/develop

X-Forwarded-For can contain multiple IP addresses
This commit is contained in:
Matt Wright
2015-05-02 13:46:21 -04:00
4 changed files with 29 additions and 4 deletions
+3 -3
View File
@@ -62,10 +62,10 @@ def login_user(user, remember=None):
return False
if _security.trackable:
if 'X-Forwarded-For' not in request.headers:
remote_addr = request.remote_addr or 'untrackable'
if 'X-Forwarded-For' in request.headers:
remote_addr = request.headers.getlist("X-Forwarded-For")[0].rpartition(' ')[-1]
else:
remote_addr = request.headers.getlist("X-Forwarded-For")[0]
remote_addr = request.remote_addr or 'untrackable'
old_current_login, new_current_login = user.current_login_at, datetime.utcnow()
old_current_ip, new_current_ip = user.current_login_ip, remote_addr