* fix: return client IPv6 address via cloudflared
The cloudflared reverse proxy populates the X-Forwarded-For header for origin IPv4 addresses, however origin IPv6 addresses are added in a different header: Cf-Connecting-Ipv6. This updates the getIP.php mechanism to retrieve the value of this header and to prefer it over other client IP headers (in both cases only if the Cf-Connecting-Ipv6 header exists and is not empty).
* fix: Validate and normalise IP addresses from request headers
getClientIp() used HTTP_CF_CONNECTING_IPV6 and other headers verbatim, allowing malformed values to reach ISP lookups and the offline DB.
Add normalizeCandidateIp() helper that trims whitespace, extracts the first comma-separated token, and validates via filter_var(). Require FILTER_FLAG_IPV6 for the CF header and fall through to the next source on failure.
Written with assistance from OpenCode using Claude Opus 4.6.
* Initial plan
* Fix PHP version check to require PHP 8.1.0+ for geoip2.phar
Changed from PHP_MAJOR_VERSION >= 8 to PHP_VERSION_ID >= 80100 to match
the actual requirement of geoip2.phar which needs PHP 8.1.0 or higher.
This prevents HTTP 500 errors on PHP 8.0.x installations.
Co-authored-by: sstidl <12804296+sstidl@users.noreply.github.com>
---------
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: sstidl <12804296+sstidl@users.noreply.github.com>
* Initial implementation of ipinfo.io offline database
* Removed unnecessary code
* add: download ipinfo db during docker build
* fixed workflow
* rename warning in workflow
* commit to trigger workflow
* Refactor getIP
* Improved UI
* Updated docker version with 5.4 changes
* Updated README.md
* Added fallback in getIP in case the offline db is missing
* Fixed typos
* just md linting
* Removed vscode stuff
* Implemented fallback in getIP for PHP<8 (returns only the IP)
* Updated doc.md
* Fixed comments in telemetry_settings.php
* New quick start video
* Corrected image name in doc_docker.md
* Replaced speedtest with just test in stats.php
* docker documentation update
* typo
---------
Co-authored-by: Federico Dossena <info@fdossena.com>
Co-authored-by: Stefan Stidl <stefan.stidl@ffg.at>
* put code to insert and query data from database into separate file
* simplify obfuscation salt file handling
* use new DB interaction functions in telemetry.php
* use new DB interaction functions in stats.php
and fix indentation levels
* format telemetry settings file
* use new function for interacting with DB in index.php
* move drawing of the image into function and try to comment each section with what it does
* reorder lines for parts of the image to align with the order they appear on the image
* bugfix: display obfuscated and deobfuscated id in stats if id obfuscation is enabled
* improve error handling
* add missing PHPDocs to functions
* imageftbbox returns an array on success and false on failure so to check if the font is usable, check if we got an array
* fix dsn for postgres
* fix limit sql statement for postgresql
* remove obsolete require statement
* use require instead of require_once since the settings file might need to be loaded multiple times
because it just contains plain variables which will just get loaded into the current scope
* move require statements to the top of the file
* make sure files are readable before requiring them
* add constant to refer to the telemetry settings file and check if it is readable before loading it
* return null if no speedtest result was found for the given id and show according message to the user instead of just exiting
* use existing constant instead of string for telemetry settings file name
* uniformly use single quotes instead of double quotes as most code places already used single quotes
* somehow some tabs sneaked in, replace them to uniformly use spaces
* mysql now uses pdo, too, reflect that in the requirements documentation
* pass username and password as constructor parameters instead of via DSN
* refactor getIP.php moving functionality into separate functions
* add some error checks
* remove closing php tags
* uniformly use single quotes for strings
most strings already used single quotes, some used double quotes
* refactor garbage moving functionality into functions
