restricted-site-access
restricted-site-access copied to clipboard
X_FORWARDED_FOR header fails to be interpreted when has multiple IPs
Describe the bug
If the header X_FORWARDED_FOR has more than 1 IP (for example when the requests goes through several reverse proxies) it seems the RSA plugin can't understand it. An other issue is that when you click on "Add my IP" to the whitelist, it does not add anything.
Steps to Reproduce
- Configure a site under two reverse proxies configured to append X_FORWARDED_FOR headers
- Restrict access to the wordpress with RSA
- Add your public IP in the RSA whitelist
- Logout and try to browse the site. You will be blocked even when your IP is whitelisted.
Screenshots, screen recording, code snippet
No response
Environment information
No response
WordPress information
No response
Code of Conduct
- [X] I agree to follow this project's Code of Conduct