blocks|key|409731|text|云flare可用的额外服务器变量包括：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|409732|$_SERVER["HTTP_CF_CONNECTING_IP"]真实访客ip地址，这就是你想要的|offset|length|style|CODE|409733|$_SERVER["HTTP_CF_IPCOUNTRY"]访问者的国家/地区|409734|$_SERVER["HTTP_CF_RAY"]|409735|这可以帮助你知道是$_SERVER["HTTP_CF_VISITOR"]还是https|409736|你可以这样使用它：|409737|if+(isset($_SERVER["HTTP_CF_CONNECTING_IP"]))+{
++$_SERVER['REMOTE_ADDR']+=+$_SERVER["HTTP_CF_CONNECTING_IP"];
}|code-block|syntax|javascript|409738|如果执行此操作，并且访问IP地址的有效性很重要，则可能需要验证$_SERVER["REMOTE_ADDR"]是否包含实际有效的cloudflare+IP地址，因为如果任何人能够直接连接到服务器IP，则任何人都可以伪造报头。|409739|entityMap|0|LINK|mutability|MUTABLE|url|https://support.cloudflare.com/entries/23046742-What-is-the-CF-RAY-header-^0|0|0|X|0|0|T|0|0|N|0|N|0|0|9|R|0|0|0|V|N|0^^$0|@$1|2|3|4|5|6|7|14|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|15|8|@$D|16|E|17|F|G]]|9|@]|A|$]]|$1|H|3|I|5|6|7|18|8|@$D|19|E|1A|F|G]]|9|@]|A|$]]|$1|J|3|K|5|6|7|1B|8|@$D|1C|E|1D|F|G]]|9|@$D|1E|E|1F|1|1G]]|A|$]]|$1|L|3|M|5|6|7|1H|8|@$D|1I|E|1J|F|G]]|9|@]|A|$]]|$1|N|3|O|5|6|7|1K|8|@]|9|@]|A|$]]|$1|P|3|Q|5|R|7|1L|8|@]|9|@]|A|$S|T]]|$1|U|3|V|5|6|7|1M|8|@$D|1N|E|1O|F|G]]|9|@]|A|$]]|$1|W|3|-4|5|6|7|1P|8|@]|9|@]|A|$]]]|X|$Y|$5|Z|10|11|A|$12|13]]]]

Extra server variables that are available to cloud flare are:

<code>$_SERVER["HTTP_CF_CONNECTING_IP"]</code> real visitor ip address, this is what you want

<code>$_SERVER["HTTP_CF_IPCOUNTRY"]</code> country of visitor

<a href="https://support.cloudflare.com/entries/23046742-What-is-the-CF-RAY-header-" rel="noreferrer"><code>$_SERVER["HTTP_CF_RAY"]</code></a>

<code>$_SERVER["HTTP_CF_VISITOR"]</code> this can help you know if its http or https

you can use it like this:

<pre><code>if (isset($_SERVER["HTTP_CF_CONNECTING_IP"])) {
 $_SERVER['REMOTE_ADDR'] = $_SERVER["HTTP_CF_CONNECTING_IP"];
}
</code></pre>

If you do this, and the validity of the visiting IP address is important, you might need to verify that the <code>$_SERVER["REMOTE_ADDR"]</code> contains an actual valid cloudflare IP address, because anyone can fake the header if he was able to connect directly to the server IP.

blocks|key|3240967|text|自从这个问题被问到并回答后，CloudFlare已经发布了用于Apache的mod_cloudflare，它记录和显示实际的访问者IP地址，而不是CloudFlare地址：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3240968|https://www.cloudflare.com/resources-downloads#mod_cloudflare|3240969|entityMap|0|LINK|mutability|MUTABLE|url^0|12|E|0|0|1P|0|0^^$0|@$1|2|3|4|5|6|7|O|8|@$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|R|8|@]|D|@$9|S|A|T|1|U]]|E|$]]|$1|H|3|-4|5|6|7|V|8|@]|D|@]|E|$]]]|I|$J|$5|K|L|M|E|$N|G]]]]

Since this question was asked and answered, CloudFlare has released <code>mod_cloudflare</code> for Apache, which logs &amp; displays the actual visitor IP address rather than the CloudFlare address:

<a href="https://www.cloudflare.com/resources-downloads#mod_cloudflare">https://www.cloudflare.com/resources-downloads#mod_cloudflare</a>

blocks|key|3453848|text|Cloudflare向您的服务器发送一些额外的请求头，包括CF-Connecting-IP，我们可以使用以下简单的一行代码将其存储到$user_ip中(如果已定义)：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3453849|$user_ip+=+(isset($_SERVER["HTTP_CF_CONNECTING_IP"])?$_SERVER["HTTP_CF_CONNECTING_IP"]:$_SERVER['REMOTE_ADDR']);|code-block|syntax|javascript|3453850|entityMap^0|T|G|1U|8|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@$9|N|A|O|B|C]|$9|P|A|Q|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|R|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|S|8|@]|D|@]|E|$]]]|L|$]]

Cloudflare sends some additional request headers to your server including <code>CF-Connecting-IP</code> which we can store into <code>$user_ip</code>, if defined, using this simple one-liner:

<pre><code>$user_ip = (isset($_SERVER["HTTP_CF_CONNECTING_IP"])?$_SERVER["HTTP_CF_CONNECTING_IP"]:$_SERVER['REMOTE_ADDR']);
</code></pre>

blocks|key|3453852|text|更新：CloudFlare已经为apache发布了一个模块mod_cloudflare，该模块将记录并显示实际的访客IP地址，而不是cloudflare！https://www.cloudflare.com/resources-downloads#mod_cloudflare访问的IP地址(回答者：olimortimer)|type|unstyled|depth|inlineStyleRanges|offset|length|style|BOLD|CODE|entityRanges|data|3453853|如果您没有访问apache运行时的权限，可以使用下面的脚本，这将允许您检查连接是否通过cloudflare并获取用户的ip。|3453854|我正在重写我用于另一个问题"CloudFlare+DNS+/+direct+IP+identifier“的答案。|3453855|cloudflare的ip是公共存储的，所以你可以去查看它们，然后检查ip是否来自cloudflare(这将允许我们从http头HTTP_CF_CONNECTING_IP获取真实的ip)。|3453856|如果你使用它来禁用所有非cf连接，或者反之亦然，我建议你有一个单独的php脚本文件，它在common.php或pagestart.php等其他脚本之前被调用。|3453857|function+ip_in_range($ip,+$range)+{
++++if+(strpos($range,+'/')+==+false)
++++++++$range+.=+'/32';

++++//+$range+is+in+IP/CIDR+format+eg+127.0.0.1/24
++++list($range,+$netmask)+=+explode('/',+$range,+2);
++++$range_decimal+=+ip2long($range);
++++$ip_decimal+=+ip2long($ip);
++++$wildcard_decimal+=+pow(2,+(32+-+$netmask))+-+1;
++++$netmask_decimal+=+~+$wildcard_decimal;
++++return+(($ip_decimal+&+$netmask_decimal)+==+($range_decimal+&+$netmask_decimal));
}

function+_cloudflare_CheckIP($ip)+{
++++$cf_ips+=+array(
++++++++'199.27.128.0/21',
++++++++'173.245.48.0/20',
++++++++'103.21.244.0/22',
++++++++'103.22.200.0/22',
++++++++'103.31.4.0/22',
++++++++'141.101.64.0/18',
++++++++'108.162.192.0/18',
++++++++'190.93.240.0/20',
++++++++'188.114.96.0/20',
++++++++'197.234.240.0/22',
++++++++'198.41.128.0/17',
++++++++'162.158.0.0/15',
++++++++'104.16.0.0/12',
++++);
++++$is_cf_ip+=+false;
++++foreach+($cf_ips+as+$cf_ip)+{
++++++++if+(ip_in_range($ip,+$cf_ip))+{
++++++++++++$is_cf_ip+=+true;
++++++++++++break;
++++++++}
++++}+return+$is_cf_ip;
}

function+_cloudflare_Requests_Check()+{
++++$flag+=+true;

++++if(!isset($_SERVER['HTTP_CF_CONNECTING_IP']))+++$flag+=+false;
++++if(!isset($_SERVER['HTTP_CF_IPCOUNTRY']))+++++++$flag+=+false;
++++if(!isset($_SERVER['HTTP_CF_RAY']))+++++++++++++$flag+=+false;
++++if(!isset($_SERVER['HTTP_CF_VISITOR']))+++++++++$flag+=+false;
++++return+$flag;
}

function+isCloudflare()+{
++++$ipCheck++++++++=+_cloudflare_CheckIP($_SERVER['REMOTE_ADDR']);
++++$requestCheck+++=+_cloudflare_Requests_Check();
++++return+($ipCheck+&&+$requestCheck);
}

//+Use+when+handling+ip's
function+getRequestIP()+{
++++$check+=+isCloudflare();

++++if($check)+{
++++++++return+$_SERVER['HTTP_CF_CONNECTING_IP'];
++++}+else+{
++++++++return+$_SERVER['REMOTE_ADDR'];
++++}
}|code-block|syntax|javascript|3453858|要使用该脚本，非常简单：|3453859|$ip+=+getRequestIP();
$cf+=+isCloudflare();

if($cf)+echo+"Connection+is+through+cloudflare:+ ";
else++++echo+"Connection+is+not+through+cloudflare:+ ";

echo+"Your+actual+ip+address+is:+".+$ip;
echo+"The+server+remote+address+header+is:+".+$_SERVER['REMOTE_ADDR'];|3453860|此脚本将显示真实的ip地址，以及请求是否为CF！|3453861|entityMap|0|LINK|mutability|MUTABLE|url|https://www.cloudflare.com/resources-downloads#mod_cloudflare|1|https://www.cloudflare.com/ips/|2|https://stackoverflow.com/a/38298000/2801045^0|0|2|T|E|25|1P|0|46|B|1|0|0|1Q|0|E|11|2|0|1S|L|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|1B|8|@$9|1C|A|1D|B|C]|$9|1E|A|1F|B|D]]|E|@$9|1G|A|1H|1|1I]|$9|1J|A|1K|1|1L]]|F|$]]|$1|G|3|H|5|6|7|1M|8|@$9|1N|A|1O|B|C]]|E|@]|F|$]]|$1|I|3|J|5|6|7|1P|8|@]|E|@$9|1Q|A|1R|1|1S]]|F|$]]|$1|K|3|L|5|6|7|1T|8|@$9|1U|A|1V|B|D]]|E|@]|F|$]]|$1|M|3|N|5|6|7|1W|8|@]|E|@]|F|$]]|$1|O|3|P|5|Q|7|1X|8|@]|E|@]|F|$R|S]]|$1|T|3|U|5|6|7|1Y|8|@]|E|@]|F|$]]|$1|V|3|W|5|Q|7|1Z|8|@]|E|@]|F|$R|S]]|$1|X|3|Y|5|6|7|20|8|@]|E|@]|F|$]]|$1|Z|3|-4|5|6|7|21|8|@]|E|@]|F|$]]]|10|$11|$5|12|13|14|F|$15|16]]|17|$5|12|13|14|F|$15|18]]|19|$5|12|13|14|F|$15|1A]]]]

Update: CloudFlare has released a module <code>mod_cloudflare</code> for apache, the module will log and display the actual visitor IP Addresses rather than those accessed by cloudflare! <a href="https://www.cloudflare.com/resources-downloads#mod_cloudflare" rel="noreferrer">https://www.cloudflare.com/resources-downloads#mod_cloudflare</a> (Answer by: <a href="https://www.cloudflare.com/ips/" rel="noreferrer">olimortimer</a>)

If you dont have access to the apache runtime you can use the script below, this will allow you to check if the connection was through cloudflare and get the users ip.

I am rewriting my answer i used for another question "<a href="https://stackoverflow.com/a/38298000/2801045">CloudFlare DNS / direct IP identifier</a>"

Cloudflare's ips are stored in public so you can go view them <a href="https://www.cloudflare.com/ips/" rel="noreferrer">here</a> then check if the ip is from cloudflare (this will allow us to get the real ip from the http header <code>HTTP_CF_CONNECTING_IP</code>).

If you are using this to disable all non cf connections or vice versa, i recommend you to have a single php script file that gets called before every other script such as a common.php or pagestart.php etc.

<pre><code>function ip_in_range($ip, $range) {
 if (strpos($range, '/') == false)
 $range .= '/32';

 // $range is in IP/CIDR format eg 127.0.0.1/24
 list($range, $netmask) = explode('/', $range, 2);
 $range_decimal = ip2long($range);
 $ip_decimal = ip2long($ip);
 $wildcard_decimal = pow(2, (32 - $netmask)) - 1;
 $netmask_decimal = ~ $wildcard_decimal;
 return (($ip_decimal &amp; $netmask_decimal) == ($range_decimal &amp; $netmask_decimal));
}

function _cloudflare_CheckIP($ip) {
 $cf_ips = array(
 '199.27.128.0/21',
 '173.245.48.0/20',
 '103.21.244.0/22',
 '103.22.200.0/22',
 '103.31.4.0/22',
 '141.101.64.0/18',
 '108.162.192.0/18',
 '190.93.240.0/20',
 '188.114.96.0/20',
 '197.234.240.0/22',
 '198.41.128.0/17',
 '162.158.0.0/15',
 '104.16.0.0/12',
 );
 $is_cf_ip = false;
 foreach ($cf_ips as $cf_ip) {
 if (ip_in_range($ip, $cf_ip)) {
 $is_cf_ip = true;
 break;
 }
 } return $is_cf_ip;
}

function _cloudflare_Requests_Check() {
 $flag = true;

 if(!isset($_SERVER['HTTP_CF_CONNECTING_IP'])) $flag = false;
 if(!isset($_SERVER['HTTP_CF_IPCOUNTRY'])) $flag = false;
 if(!isset($_SERVER['HTTP_CF_RAY'])) $flag = false;
 if(!isset($_SERVER['HTTP_CF_VISITOR'])) $flag = false;
 return $flag;
}

function isCloudflare() {
 $ipCheck = _cloudflare_CheckIP($_SERVER['REMOTE_ADDR']);
 $requestCheck = _cloudflare_Requests_Check();
 return ($ipCheck &amp;&amp; $requestCheck);
}

// Use when handling ip's
function getRequestIP() {
 $check = isCloudflare();

 if($check) {
 return $_SERVER['HTTP_CF_CONNECTING_IP'];
 } else {
 return $_SERVER['REMOTE_ADDR'];
 }
}
</code></pre>

To use the script it's quite simple:

<pre><code>$ip = getRequestIP();
$cf = isCloudflare();

if($cf) echo "Connection is through cloudflare: &lt;br&gt;";
else echo "Connection is not through cloudflare: &lt;br&gt;";

echo "Your actual ip address is: ". $ip;
echo "The server remote address header is: ". $_SERVER['REMOTE_ADDR'];
</code></pre>

This script will show you the real ip address and if the request is CF or not!

blocks|key|406855|text|对于Magento1.x用户(我还没有尝试Magento2.0)，检查需要更改应用程序/etc/local.xml的https://tall-paul.co.uk/2012/03/13/magento-show-remote-ip-in-cloudflare-the-right-way/并添加:+HTTP_CF_CONNECTING_IP|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|406856|entityMap|0|LINK|mutability|MUTABLE|url|https://tall-paul.co.uk/2012/03/13/magento-show-remote-ip-in-cloudflare-the-right-way/^0|1M|2E|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

For magento 1.x users (I haven't try magento 2.0 yet), check <a href="https://tall-paul.co.uk/2012/03/13/magento-show-remote-ip-in-cloudflare-the-right-way/" rel="nofollow noreferrer">https://tall-paul.co.uk/2012/03/13/magento-show-remote-ip-in-cloudflare-the-right-way/</a> which needs to change app/etc/local.xml and add:

 HTTP_CF_CONNECTING_IP

blocks|key|409746|text|HTTP_CF_CONNECTING_IP只有在你使用云forget的情况下才能工作，也许你转移了你的站点或者移除了云forget，你会忘记它的值，所以使用下面的代码。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|409747|$ip=$_SERVER["HTTP_CF_CONNECTING_IP"];
if+(!isset($ip))+{
++$ip+=+$_SERVER['REMOTE_ADDR'];
}|code-block|syntax|javascript|409748|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

HTTP_CF_CONNECTING_IP is only working if you are using cloudflare maybe you transfer your site or remove cloudflare you will forget the value so use this code .

<pre><code>$ip=$_SERVER["HTTP_CF_CONNECTING_IP"];
if (!isset($ip)) {
 $ip = $_SERVER['REMOTE_ADDR'];
}
</code></pre>

blocks|key|3241012|text|当您使用CloudFlare时，您的服务器和用户之间的所有请求都通过CloudFlare服务器路由。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3241013|在这种情况下，获取用户真实IP地址有两种方法：|3241014|3241015|通过CloudFlare+Servers添加的额外服务器标头|ordered-list-item|3241016|在服务器上添加CloudFlare+Apache/NGINX模块。|3241017|3241018|方法1:通过额外的服务器报头获取IP|3241019|您可以使用以下代码获取用户的IP地址：|3241020|$user_ip+=+(isset($_SERVER["HTTP_CF_CONNECTING_IP"])+$_SERVER["HTTP_CF_CONNECTING_IP"]:$_SERVER['REMOTE_ADDR']);|offset|length|style|CODE|3241021|它是如何工作的？|3241022|CloudFlare在请求中添加了一些额外的服务器变量，如下所示：|3241023|$_SERVER["HTTP_CF_CONNECTING_IP"]+-用户的真实IP地址|3241024|$_SERVER["HTTP_CF_IPCOUNTRY"]+-用户的ISO2国家/地区|3241025|$_SERVER["HTTP_CF_RAY"]用于登录的特殊字符串|3241026|在上面的代码中，我们检查是否设置了$_SERVER["HTTP_CF_CONNECTING_IP"]。如果它在那里，我们将认为它是用户的IP地址，否则我们将使用默认代码$_SERVER['REMOTE_ADDR']|3241027|方法2:在服务器上安装Cloudflare模块|3241028|3241029|Installing+CloudFlare+Module+on+Apache+Server|unordered-list-item|3241030|Installing+CloudFlare+Module+on+NGINX+Server|3241031|Installing+CloudFlare+Module+on+EasyApache%2BCPanel|3241032|3241033|entityMap|0|LINK|mutability|MUTABLE|url|https://support.cloudflare.com/hc/en-us/articles/203656534-How-do-I-restore-original-visitor-IP-with-Apache-2-4-|1|https://support.cloudflare.com/hc/en-us/articles/200170706-How-do-I-restore-original-visitor-IP-with-Nginx-|2|https://support.cloudflare.com/hc/en-us/articles/206175737-How-do-I-restore-original-visitor-IP-with-EasyApache-cPanel-^0|0|0|0|0|0|0|0|0|0|34|0|0|0|0|X|0|0|T|0|0|N|0|H|X|2C|N|0|0|0|0|19|0|0|0|18|1|0|0|1D|2|0|0^^$0|@$1|2|3|4|5|6|7|1T|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1U|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|1V|8|@]|9|@]|A|$]]|$1|E|3|F|5|G|7|1W|8|@]|9|@]|A|$]]|$1|H|3|I|5|G|7|1X|8|@]|9|@]|A|$]]|$1|J|3|-4|5|6|7|1Y|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|1Z|8|@]|9|@]|A|$]]|$1|M|3|N|5|6|7|20|8|@]|9|@]|A|$]]|$1|O|3|P|5|6|7|21|8|@$Q|22|R|23|S|T]]|9|@]|A|$]]|$1|U|3|V|5|6|7|24|8|@]|9|@]|A|$]]|$1|W|3|X|5|6|7|25|8|@]|9|@]|A|$]]|$1|Y|3|Z|5|6|7|26|8|@$Q|27|R|28|S|T]]|9|@]|A|$]]|$1|10|3|11|5|6|7|29|8|@$Q|2A|R|2B|S|T]]|9|@]|A|$]]|$1|12|3|13|5|6|7|2C|8|@$Q|2D|R|2E|S|T]]|9|@]|A|$]]|$1|14|3|15|5|6|7|2F|8|@$Q|2G|R|2H|S|T]|$Q|2I|R|2J|S|T]]|9|@]|A|$]]|$1|16|3|17|5|6|7|2K|8|@]|9|@]|A|$]]|$1|18|3|-4|5|6|7|2L|8|@]|9|@]|A|$]]|$1|19|3|1A|5|1B|7|2M|8|@]|9|@$Q|2N|R|2O|1|2P]]|A|$]]|$1|1C|3|1D|5|1B|7|2Q|8|@]|9|@$Q|2R|R|2S|1|2T]]|A|$]]|$1|1E|3|1F|5|1B|7|2U|8|@]|9|@$Q|2V|R|2W|1|2X]]|A|$]]|$1|1G|3|-4|5|6|7|2Y|8|@]|9|@]|A|$]]|$1|1H|3|-4|5|6|7|2Z|8|@]|9|@]|A|$]]]|1I|$1J|$5|1K|1L|1M|A|$1N|1O]]|1P|$5|1K|1L|1M|A|$1N|1Q]]|1R|$5|1K|1L|1M|A|$1N|1S]]]]

When you are using CloudFlare all your requests between your server and users are routed through CloudFlare servers.

In this case there are two methods to get User's Real IP Address:

<ol>
<li>Through Extra Server Headers added by CloudFlare Servers</li>
<li>Adding a CloudFlare Apache/NGINX Module on your server.</li>
</ol>

<h1>Method 1: Get IP though extra Server Headers</h1>

You can use the following code to get user's IP Address:

<code>$user_ip = (isset($_SERVER["HTTP_CF_CONNECTING_IP"]) $_SERVER["HTTP_CF_CONNECTING_IP"]:$_SERVER['REMOTE_ADDR']);</code>

<h2>How it is working?</h2>

CloudFlare adds some extra server variables in the request as follows:

<code>$_SERVER["HTTP_CF_CONNECTING_IP"]</code> - Real IP Address of user

<code>$_SERVER["HTTP_CF_IPCOUNTRY"]</code> - ISO2 Country of the User

<code>$_SERVER["HTTP_CF_RAY"]</code> A Special string for loggin purpose

In the above code, we are checking if <code>$_SERVER["HTTP_CF_CONNECTING_IP"]</code> is set or not. If it is there we will consider that as user's IP Address else we will use the default code as <code>$_SERVER['REMOTE_ADDR']</code>

<h1>Method 2: Installing Cloudflare Module on your server</h1>

<ul>
<li><a href="https://support.cloudflare.com/hc/en-us/articles/203656534-How-do-I-restore-original-visitor-IP-with-Apache-2-4-" rel="nofollow noreferrer">Installing CloudFlare Module on Apache Server</a></li>
<li><a href="https://support.cloudflare.com/hc/en-us/articles/200170706-How-do-I-restore-original-visitor-IP-with-Nginx-" rel="nofollow noreferrer">Installing CloudFlare Module on NGINX Server</a></li>
<li><a href="https://support.cloudflare.com/hc/en-us/articles/206175737-How-do-I-restore-original-visitor-IP-with-EasyApache-cPanel-" rel="nofollow noreferrer">Installing CloudFlare Module on EasyApache+CPanel</a> </li>
</ul>

blocks|key|407057|text|很难将HTTP_CF_CONNECTING_IP转换为REMOTE_ADDR。因此，您可以使用apache+(.htaccess)自动前缀来完成此操作。这样您就不需要考虑$_SERVER['REMOTE_ADDR']在所有PHP脚本中是否都具有正确的值。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|407058|.htaccess代码|BOLD|407059|php_value+auto_prepend_file+"/path/to/file.php"|code-block|syntax|javascript|407060|php代码(file.php)|407061|<?php

define('CLIENT_IP',+isset($_SERVER['HTTP_CF_CONNECTING_IP'])+?+$_SERVER['HTTP_CF_CONNECTING_IP']+:+$_SERVER['REMOTE_ADDR']);|407062|了解更多here|407063|entityMap|0|LINK|mutability|MUTABLE|url|https://developer.hyvor.com/php/use-htaccess-auto-prepending-effectively^0|2D|N|0|0|B|0|0|0|F|0|0|4|4|0|0^^$0|@$1|2|3|4|5|6|7|11|8|@$9|12|A|13|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|14|8|@$9|15|A|16|B|H]]|D|@]|E|$]]|$1|I|3|J|5|K|7|17|8|@]|D|@]|E|$L|M]]|$1|N|3|O|5|6|7|18|8|@$9|19|A|1A|B|H]]|D|@]|E|$]]|$1|P|3|Q|5|K|7|1B|8|@]|D|@]|E|$L|M]]|$1|R|3|S|5|6|7|1C|8|@]|D|@$9|1D|A|1E|1|1F]]|E|$]]|$1|T|3|-4|5|6|7|1G|8|@]|D|@]|E|$]]]|U|$V|$5|W|X|Y|E|$Z|10]]]]

It would be hard to convert HTTP_CF_CONNECTING_IP to REMOTE_ADDR. So you can use apache (.htaccess) auto prepending to do that. So that you do not need to think about whether the <code>$_SERVER['REMOTE_ADDR']</code> has the correct value in all the PHP scripts.

.htaccess code

<pre><code>php_value auto_prepend_file "/path/to/file.php"
</code></pre>

php code (file.php)

<pre><code>&lt;?php

define('CLIENT_IP', isset($_SERVER['HTTP_CF_CONNECTING_IP']) ? $_SERVER['HTTP_CF_CONNECTING_IP'] : $_SERVER['REMOTE_ADDR']);
</code></pre>

Learn More <a href="https://developer.hyvor.com/php/use-htaccess-auto-prepending-effectively" rel="nofollow noreferrer">here</a>

blocks|key|3453958|text|在Laravel中，将以下行添加到AppServiceProvider|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|3453959|...
use+Symfony\Component\HttpFoundation\Request;


...
public+function+boot()
{
++++Request::setTrustedProxies(['REMOTE_ADDR'],+Request::HEADER_X_FORWARDED_FOR);
}|code-block|syntax|javascript|3453960|现在，您可以使用request()->ip()获取真实的客户端IP。|3453961|阅读更多here。|3453962|entityMap|0|LINK|mutability|MUTABLE|url|https://khalilst.medium.com/get-real-client-ip-behind-cloudflare-in-laravel-189cb89059ff^0|H|I|0|0|8|F|0|4|4|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]]|D|@]|E|$]]|$1|F|3|G|5|H|7|Z|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|10|8|@$9|11|A|12|B|C]]|D|@]|E|$]]|$1|M|3|N|5|6|7|13|8|@]|D|@$9|14|A|15|1|16]]|E|$]]|$1|O|3|-4|5|6|7|17|8|@]|D|@]|E|$]]]|P|$Q|$5|R|S|T|E|$U|V]]]]

In Laravel add the following line to <code>AppServiceProvider</code>:
<pre><code>...
use Symfony\Component\HttpFoundation\Request;


...
public function boot()
{
 Request::setTrustedProxies(['REMOTE_ADDR'], Request::HEADER_X_FORWARDED_FOR);
}
</code></pre>
Now you can get real client IP using <code>request()-&gt;ip()</code>.
Read more <a href="https://khalilst.medium.com/get-real-client-ip-behind-cloudflare-in-laravel-189cb89059ff" rel="nofollow noreferrer">here</a>.

blocks|key|409898|text|Cloudflare有一个选项，可以在域名的网络管理页面的标题中使用“伪IPv4”地址。您可以选择添加或覆盖发送到服务器的标头。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|409899|​|409900|📷|atomic|offset|length|409901|409902|从文档中：|409903|409904|+什么是伪IPv4?|blockquote|style|BOLD|409905|409906|作为加速采用IPv6的权宜之计，Cloudflare提供了伪IPv4，它支持期望IPv6地址的遗留应用程序中的IPv4地址。目标是使用E类IPv4地址空间为每个IPv6地址提供几乎唯一的IPv4地址，这是试验性的，通常看不到流量。了解更多see+here。|409907|选项|409908|409909|409910|Add+header:添加其他Cf-Pseudo-IPv4+header+only|unordered-list-item|CODE|409911|Overwrite+header：使用伪Cf-Connecting-IP地址覆盖现有的X-Forwarded-For和IPv4+header。|409912|409913|注意：我们建议您将此设置保留为“Off”，除非您有特殊需要。|409914|您可以了解有关此特性from+this+article+from+Cloudflare的更多信息，其中更详细地介绍了如何在IPv4中的32位空间中容纳IPv6的128位地址空间。|409915|如果您想知道IPv6地址和伪IPv4，Cloudflare会在启用伪Cf-Connecting-IPv6时添加一个IPv4头。这可以用来测量有多少流量来自IPv6网络上的设备，如果您在投资更新仍受IPv4限制的系统之前需要一个可靠的数字来显示管理，这可能会很有用。|409916|entityMap|0|IMAGE|mutability|IMMUTABLE|imageUrl|https://ask.qcloudimg.com/http-save/yehe-900000/561e4f5abe85b2106499a264df1b358b.png|imageAlt|1|LINK|MUTABLE|url|https://support.cloudflare.com/hc/articles/229666767|2|https://support.cloudflare.com/hc/en-us/articles/202494830-Pseudo-IPv4-Supporting-IPv6-addresses-in-legacy-IPv4-applications^0|0|0|0|1|0|0|0|0|0|1|9|0|0|3B|8|1|0|0|2|0|0|0|0|B|F|E|0|0|H|K|G|17|F|0|0|0|3|0|A|X|2|0|Y|I|0^^$0|@$1|2|3|4|5|6|7|1R|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|1S|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|1T|8|@]|9|@$G|1U|H|1V|1|1W]]|A|$]]|$1|I|3|C|5|6|7|1X|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|1Y|8|@]|9|@]|A|$]]|$1|L|3|-4|5|6|7|1Z|8|@]|9|@]|A|$]]|$1|M|3|N|5|O|7|20|8|@$G|21|H|22|P|Q]]|9|@]|A|$]]|$1|R|3|-4|5|6|7|23|8|@]|9|@]|A|$]]|$1|S|3|T|5|6|7|24|8|@]|9|@$G|25|H|26|1|27]]|A|$]]|$1|U|3|V|5|6|7|28|8|@$G|29|H|2A|P|Q]]|9|@]|A|$]]|$1|W|3|-4|5|6|7|2B|8|@]|9|@]|A|$]]|$1|X|3|-4|5|6|7|2C|8|@]|9|@]|A|$]]|$1|Y|3|Z|5|10|7|2D|8|@$G|2E|H|2F|P|Q]|$G|2G|H|2H|P|11]]|9|@]|A|$]]|$1|12|3|13|5|10|7|2I|8|@$G|2J|H|2K|P|Q]|$G|2L|H|2M|P|11]|$G|2N|H|2O|P|11]]|9|@]|A|$]]|$1|14|3|-4|5|6|7|2P|8|@]|9|@]|A|$]]|$1|15|3|16|5|6|7|2Q|8|@$G|2R|H|2S|P|Q]]|9|@]|A|$]]|$1|17|3|18|5|6|7|2T|8|@]|9|@$G|2U|H|2V|1|2W]]|A|$]]|$1|19|3|1A|5|6|7|2X|8|@$G|2Y|H|2Z|P|11]]|9|@]|A|$]]|$1|1B|3|-4|5|6|7|30|8|@]|9|@]|A|$]]]|1C|$1D|$5|1E|1F|1G|A|$1H|1I|1J|-4]]|1K|$5|1L|1F|1M|A|$1N|1O]]|1P|$5|1L|1F|1M|A|$1N|1Q]]]]

Cloudflare has an option to use a &quot;Pseudo IPv4&quot; address in the headers on the Network Management page for the domain. You have the option of adding or overwriting the headers that are sent to your server.
<img src="https://i.stack.imgur.com/d8Qey.png" alt="Cloudflare Dashboard | Network" />
From the documentation:
<blockquote>
What is Pseudo IPv4?
As a stopgap to accelerate the adoption of IPv6, Cloudflare offers Pseudo IPv4 which supports IPv6 addresses in legacy applications expecting IPv4 addresses. The goal is to provide a nearly unique IPv4 address for each IPv6 address, using Class E IPv4 address space, which is designated as experimental and would not normally see traffic. To learn more <a href="https://support.cloudflare.com/hc/articles/229666767" rel="nofollow noreferrer">see here</a>.
Options
<ul>
<li>Add header: Add additional <code>Cf-Pseudo-IPv4</code> header only</li>
<li>Overwrite headers: Overwrite the existing <code>Cf-Connecting-IP</code> and <code>X-Forwarded-For</code> headers with a pseudo IPv4 address.</li>
</ul>
Note: We recommend leaving this set to “Off” unless you have a specific need.
</blockquote>
You can learn more about this feature <a href="https://support.cloudflare.com/hc/en-us/articles/202494830-Pseudo-IPv4-Supporting-IPv6-addresses-in-legacy-IPv4-applications" rel="nofollow noreferrer">from this article from Cloudflare</a>, where it goes into a little more detail about how they try to accommodate the 128-bit address space of IPv6 in the 32-bit space found in IPv4.
In the event that you would like to know the IPv6 address along with the pseudo IPv4, Cloudflare adds a <code>Cf-Connecting-IPv6</code> header when Pseudo IPv4 is enabled. This can be used to measure how much of your traffic is originating from devices that are on IPv6 networks, which can be useful if you need a solid number to show management before investments are made in updating systems that are still bound to the IPv4 limitations.

blocks|key|407195|text|最好是在线检查cloudflare+ip范围(因为它随时可能发生变化)，然后检查它是否来自cloudflare。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|407196|Cloudflare+IP+txt|offset|length|407197|如果源是Cloudflare，你可以使用$_SERVER['HTTP_CF_CONNECTING_IP']来获取你的客户端请求的ip地址，但是对所有的请求使用它是不安全的，因为它可以由任何用户在请求头中发送来欺骗你。|style|CODE|407198|您可以使用以下代码来获取客户端请求的真实ip地址：|407199|function+_getUserRealIP()+{
++++$ipaddress+=+'';
++++if(isset($_SERVER['REMOTE_ADDR']))
++++++++$ipaddress+=+$_SERVER['REMOTE_ADDR'];
++++else+if+(isset($_SERVER['HTTP_CLIENT_IP']))
++++++++$ipaddress+=+$_SERVER['HTTP_CLIENT_IP'];
++++else+if(isset($_SERVER['HTTP_X_FORWARDED_FOR']))
++++++++$ipaddress+=+$_SERVER['HTTP_X_FORWARDED_FOR'];
++++else+if(isset($_SERVER['HTTP_X_FORWARDED']))
++++++++$ipaddress+=+$_SERVER['HTTP_X_FORWARDED'];
++++else+if(isset($_SERVER['HTTP_X_CLUSTER_CLIENT_IP']))
++++++++$ipaddress+=+$_SERVER['HTTP_X_CLUSTER_CLIENT_IP'];
++++else+if(isset($_SERVER['HTTP_FORWARDED_FOR']))
++++++++$ipaddress+=+$_SERVER['HTTP_FORWARDED_FOR'];
++++else+if(isset($_SERVER['HTTP_FORWARDED']))
++++++++$ipaddress+=+$_SERVER['HTTP_FORWARDED'];
++++else
++++++++$ipaddress+=+'UNKNOWN';
++++return+$ipaddress;
}

function+_readCloudflareIps()
{
++++$file+=+file("https://www.cloudflare.com/ips-v4",FILE_IGNORE_NEW_LINES);
++++return+$file;
}

function+_checkIpInRange($ip,+$range)+{
++++if+(strpos($range,+'/')+==+false)
++++++++$range+.=+'/32';

++++//+$range+is+in+IP/CIDR+format+eg+127.0.0.1/24
++++list($range,+$netmask)+=+explode('/',+$range,+2);
++++$range_decimal+=+ip2long($range);
++++$ip_decimal+=+ip2long($ip);
++++$wildcard_decimal+=+pow(2,+(32+-+$netmask))+-+1;
++++$netmask_decimal+=+~+$wildcard_decimal;
++++return+(($ip_decimal+&+$netmask_decimal)+==+($range_decimal+&+$netmask_decimal));
}

function+_checkIsCloudflare($ip)+{
++++$cf_ips+=+_readCloudflareIps();
++++$is_cf_ip+=+false;
++++foreach+($cf_ips+as+$cf_ip)+{
++++++++if+(_checkIpInRange($ip,+$cf_ip))+{
++++++++++++$is_cf_ip+=+true;
++++++++++++break;
++++++++}
++++}
++++return+$is_cf_ip;
}

function+getRealIp()
{
++++$httpIp+=+_getUserRealIP();
++++$check+=+_checkIsCloudflare($httpIp);
++++if+($check)+{
++++++++return+$_SERVER['HTTP_CF_CONNECTING_IP'];
++++}else{
++++++++return+$httpIp;
++++}
}|code-block|syntax|javascript|407200|将此函数导入代码后，您只需调用getRealIp()函数，如下所示：|407201|$userIp+=+getRealIp();
echo+$userIp();|407202|entityMap|0|LINK|mutability|MUTABLE|url|https://www.cloudflare.com/ips-v4^0|0|0|H|0|0|K|X|0|0|0|F|B|0|0^^$0|@$1|2|3|4|5|6|7|12|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|13|8|@]|9|@$D|14|E|15|1|16]]|A|$]]|$1|F|3|G|5|6|7|17|8|@$D|18|E|19|H|I]]|9|@]|A|$]]|$1|J|3|K|5|6|7|1A|8|@]|9|@]|A|$]]|$1|L|3|M|5|N|7|1B|8|@]|9|@]|A|$O|P]]|$1|Q|3|R|5|6|7|1C|8|@$D|1D|E|1E|H|I]]|9|@]|A|$]]|$1|S|3|T|5|N|7|1F|8|@]|9|@]|A|$O|P]]|$1|U|3|-4|5|6|7|1G|8|@]|9|@]|A|$]]]|V|$W|$5|X|Y|Z|A|$10|11]]]]

It's better to check cloudflare ip ranges online (because it may change anytime) then check it's from cloudflare or not.
<a href="https://www.cloudflare.com/ips-v4" rel="nofollow noreferrer">Cloudflare IP txt</a>
If the source is Cloudflare you can use <code>$_SERVER['HTTP_CF_CONNECTING_IP']</code> to get your client request ip-address but it's not safe to use it for all requests because it can send by any user in request header to trick you.
You can use following code to get real ip-address of your client request:
<pre><code>function _getUserRealIP() {
 $ipaddress = '';
 if(isset($_SERVER['REMOTE_ADDR']))
 $ipaddress = $_SERVER['REMOTE_ADDR'];
 else if (isset($_SERVER['HTTP_CLIENT_IP']))
 $ipaddress = $_SERVER['HTTP_CLIENT_IP'];
 else if(isset($_SERVER['HTTP_X_FORWARDED_FOR']))
 $ipaddress = $_SERVER['HTTP_X_FORWARDED_FOR'];
 else if(isset($_SERVER['HTTP_X_FORWARDED']))
 $ipaddress = $_SERVER['HTTP_X_FORWARDED'];
 else if(isset($_SERVER['HTTP_X_CLUSTER_CLIENT_IP']))
 $ipaddress = $_SERVER['HTTP_X_CLUSTER_CLIENT_IP'];
 else if(isset($_SERVER['HTTP_FORWARDED_FOR']))
 $ipaddress = $_SERVER['HTTP_FORWARDED_FOR'];
 else if(isset($_SERVER['HTTP_FORWARDED']))
 $ipaddress = $_SERVER['HTTP_FORWARDED'];
 else
 $ipaddress = 'UNKNOWN';
 return $ipaddress;
}

function _readCloudflareIps()
{
 $file = file(&quot;https://www.cloudflare.com/ips-v4&quot;,FILE_IGNORE_NEW_LINES);
 return $file;
}

function _checkIpInRange($ip, $range) {
 if (strpos($range, '/') == false)
 $range .= '/32';

 // $range is in IP/CIDR format eg 127.0.0.1/24
 list($range, $netmask) = explode('/', $range, 2);
 $range_decimal = ip2long($range);
 $ip_decimal = ip2long($ip);
 $wildcard_decimal = pow(2, (32 - $netmask)) - 1;
 $netmask_decimal = ~ $wildcard_decimal;
 return (($ip_decimal &amp; $netmask_decimal) == ($range_decimal &amp; $netmask_decimal));
}

function _checkIsCloudflare($ip) {
 $cf_ips = _readCloudflareIps();
 $is_cf_ip = false;
 foreach ($cf_ips as $cf_ip) {
 if (_checkIpInRange($ip, $cf_ip)) {
 $is_cf_ip = true;
 break;
 }
 }
 return $is_cf_ip;
}

function getRealIp()
{
 $httpIp = _getUserRealIP();
 $check = _checkIsCloudflare($httpIp);
 if ($check) {
 return $_SERVER['HTTP_CF_CONNECTING_IP'];
 }else{
 return $httpIp;
 }
}
</code></pre>
After importing this functions to your code you just need to call <code>getRealIp()</code> function like:
<pre><code>$userIp = getRealIp();
echo $userIp();
</code></pre>

I'm trying to track and log users/visitors that are accessing my website using PHP's <code>$_SERVER['REMOTE_ADDR']</code> to do so. A typical method for IP address tracking in PHP.

However, I am using CloudFlare for caching and such and receiving their IP addresses as CloudFlare's:

<blockquote>
 108.162.212.* - 108.162.239.*
</blockquote>

What would be a correct method of retrieving the actual users/visitors IP address while still using CloudFlare?

CloudFlare and logging visitor IP addresses via in PHP

服务器

路由

CIDR

我正在尝试使用PHP的$_SERVER['REMOTE_ADDR']来跟踪和记录访问我网站的用户/访问者。PHP中IP地址跟踪的典型方法。但是，我使用CloudFlare进行缓存，并接收它们的IP地址，如CloudFlare的： 108.162.212.* -108.162.239。*在仍然使用CloudFlare的情...

问CloudFlare和日志访问者的IP地址
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问CloudFlare和日志访问者的IP地址EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问CloudFlare和日志访问者的IP地址
EN