Suhosin and Server Info strange goings on..

[BlindSide]

Sure, can you point me to a host that has no problems with anything whatsoever please...

I see your point, smartypants. The point _I_ was trying to make was that there are some baseline expectations for any host, and a response like, "We couldn't solve the problem with our own servers" would break the limit, in my opinion.

Happy to provide you with some good hosting options, if you really are interested. PM me for more info.

It is their eccomerce server, and yes Apache is running as CGI. Would this always cause this issue then?

Assuming the problem is at the CGI level, then I would say yes. Regardless, the problem is definitely at the server level, and it's up to your host to fix.

[dgent]

It gets it from PHP via $_SERVER['REMOTE_ADDR'], which gets it from Apache, which supplies the info based on the Apache configuration of the server, which is under the control of your hosting company's server administrator.

The hosting company came back and told me using $_SERVER['HTTP_X_FORWARDED_FOR'] will work (which it does)

Where in the Zen code can I change it to this reference (if that will be as simple as that)

[dgent]

Isnt this the solution, as found in Zencart 2.0?

https://www.zen-cart.com/forum/showthread.php?p=357415

[Vger]

One of the major effects of running SuHosin is that it encrypts all session data. This is done to prevent session hijacking. If you disable that ability in SuHosin then you reduce its effeciveness greatly, but if you don't disable it then the session id stored on your site or in your db is encrypted and doesn't match with the unencrypted session stored on the visitors computer. The result is that no user can ever get anywhere on your website (the session ids never match).

This, along with the ip problem you are reporting, indicates that they don't really know what they're doing.

Vger

[dgent]

Well Ive never had any of those issues on any of the sites, and the reason for the IP issue in who's online is due to running through a proxy.

Hence my post above.

[DrByte]

Why is your host finding it necessary to run through a proxy? What's the business case for that?

[dgent]

Why is your host finding it necessary to run through a proxy? What's the business case for that?

No answer yet - for the meantime can you tell me what to change to $_SERVER['HTTP_X_FORWARDED_FOR'] so I can get the who's online working. Thanks.

[dgent]

Its ok, I have modified includes/functions/whos_online.php and now it shows the correct IP's