LightBrown - problem solved!

I used your code from the referenced thread as a guide to clear out lines referring to HTTP_X_FORWARDED from

/includes/functions/functions_general.php
and
/{alias}admin/includes/functions/general.php

Now - all references to IP addresses on my site and in admin emails are showing real IP addresses, NOT my server address.

The bogus IP addresses were showing up in the admin -- Whose Online tool. All visitors including spiders were showing as my server's IP address, not their own. When I get abusive spiders, especially from overseas, that hammer my site, I block them via my .htaccess.

Additionally, admin emails notifying of orders and registrations showed my server IP instead of the actual users address. Now, I'll know where they're really coming from, and I can block the danged spam registrations.

Thanks very much for the help!

best,

Greg