ip.php ➔ ipInRange() - Code Metrics - Inspection of "### ADDED: ##### IP: - decbin32(): to ensure that..." - padosoft/support - Measure and Improve Code Quality continuously with Scrutinizer

Completed

Push — master ( 47bfcf...552113 )

by Lorenzo

created 2017-08-09 14:05 UTC

ip.php ➔ ipInRange() C

↳ Parent: Project

Complexity

Conditions	13
Paths	10

Size

Total Lines	52
Code Lines	31

Duplication

Lines	0
Ratio	0 %

Importance

Changes

Metric	Value
cc	13
eloc	31
nc	10
nop	2
dl	0
loc	52
rs	5.9687
c	0
b	0
f	0

How to fix Long Method Complexity

<?php

/**
 * get Client IP. DEPRECATED! use getClientIP().
 * @param array $server
 * @return string
 * @deprecated
 * @see getClientIp();
 */
function getIPVisitor(array $server = []) : string
{
    $IP2Check = '';
    if (array_key_exists('HTTP_X_FORWARDED_FOR', $server) && trim($server['HTTP_X_FORWARDED_FOR']) != '') {
        $IP2Check = $server['HTTP_X_FORWARDED_FOR'];
    } elseif (array_key_exists('REMOTE_ADDR', $server) && trim($server['REMOTE_ADDR'])) {
        $IP2Check = $server['REMOTE_ADDR'];
    }

    if (strpos($IP2Check, ',') === false) {
        return $IP2Check;
    }

    // Header can contain multiple IP-s of proxies that are passed through.
    // Only the IP added by the last proxy (last IP in the list) can be trusted.
    $arrIps = explode(',', $IP2Check);
    if (!is_array($arrIps) || count($arrIps) < 1) {
        return '';
    }

    return trim(head($arrIps));
}

/**
 * anonimizeIp masquerade last digit of IP address.
 * With bad ip argument return 0.0.0.0
 * Support IPv4, Ipv6 and IPv4 Compatibility.
 * @param  string $ip
 * @return string  masked IP
 */
function anonimizeIp(string $ip) : string
{
    if (isIPv4($ip)) {
        return anonimizeIpv4($ip);
    } elseif (isIPv4Compatibility($ip)) {
        return anonimizeIpv4Compatibility($ip);
    }
    return anonimizeIpv6($ip);
}

/**
 * masquerade last digit of IP address.
 * With bad ip argument return 0.0.0.0
 * @param string $ip
 * @return string
 */
function anonimizeIpv4Compatibility(string $ip):string
{
    if (isIPv4Compatibility($ip)) {
        return substr($ip, 0, strrpos($ip, ".") + 1) . '0';
    }
    return '0.0.0.0';
}

/**
 * masquerade last digit of IP address with inet php functions.
 * With bad ip argument return 0.0.0.0
 * @param string $ip
 * @return string
 */
function anonimizeIpWithInet(string $ip):string
{
    if ($ip = @inet_pton($ip)) {
        return inet_ntop(substr($ip, 0, strlen($ip) / 2) . str_repeat(chr(0), strlen($ip) / 2));
    }
    return '0.0.0.0';
}

/**
 * masquerade last digit of IP address.
 * With bad ip argument return 0.0.0.0
 * @param string $ip
 * @return string
 */
function anonimizeIpv6(string $ip):string
{
    if (strrpos($ip, ":") > 0) {
        return substr($ip, 0, strrpos($ip, ":") + 1) . '0';
    }
    return '0.0.0.0';
}

/**
 * masquerade last digit of IP address.
 * With bad ip argument return 0.0.0.0
 * @param string $ip
 * @return string
 */
function anonimizeIpv4(string $ip):string
{
    if (isIPv4($ip)) {
        return substr($ip, 0, strrpos($ip, ".") + 1) . '0';
    }
    return '0.0.0.0';
}

/**
 * getHost Get the Internet host name corresponding to a given IP address
 * @param  string $ip the IP to resolve.
 * @return string    Returns the host name of the Internet host specified by ip_address on success,
 *                   the unmodified ip_address on failure,
 *                   or FALSE on malformed input.
 */
function getHost($ip)
{
    return gethostbyaddr($ip);
}

/**
 * Returns the client IP addresses.
 *
 * In the returned array the most trusted IP address is first, and the
 * least trusted one last. The "real" client IP address is the last one,
 * but this is also the least trusted one.
 * Trusted proxies are stripped if passed.
 *
 * Use this method carefully; you should use getClientIp() instead.
 *
 * @param array $server
 * @param array $trustedProxies
 *
 * @return array The client IP addresses
 *
 * @see getClientIp()
 * @see https://github.com/symfony/symfony/blob/0b39ce23150c34c990e3eccfae4e375161c0d352/src/Symfony/Component/HttpFoundation/Request.php#L831
 */
function getClientIps(array $server, array $trustedProxies = []) : array
{
    if (empty($server)) {
        return [''];
    }
    $clientIps = array();
    $ip = $server['REMOTE_ADDR'];
    if (!isFromTrustedProxy($trustedProxies, $ip)) {
        return array($ip);
    }
    if (array_key_exists('FORWARDED', $server) && trim($server['FORWARDED']) != '') {
        $forwardedHeader = $server['FORWARDED'];
        preg_match_all('{(for)=("?\[?)([a-z0-9\.:_\-/]*)}', $forwardedHeader, $matches);
        $clientIps = $matches[3];
    } elseif (array_key_exists('X_FORWARDED_FOR', $server) && trim($server['X_FORWARDED_FOR']) != '') {
        $clientIps = array_map('trim', explode(',', $server['X_FORWARDED_FOR']));
    }
    $clientIps[] = $ip; // Complete the IP chain with the IP the request actually came from
    $ip = $clientIps[0]; // Fallback to this when the client IP falls into the range of trusted proxies
    foreach ($clientIps as $key => $clientIp) {
        // Remove port (unfortunately, it does happen)
        if (preg_match('{((?:\d+\.){3}\d+)\:\d+}', $clientIp, $match)) {
            $clientIps[$key] = $clientIp = $match[1];
        }
        if (checkIp($clientIp, $trustedProxies)) {
            unset($clientIps[$key]);
        }
    }
    // Now the IP chain contains only untrusted proxies and the client IP
    return $clientIps ? array_reverse($clientIps) : array($ip);
}

/**
 * Returns the client IP address.
 *
 * This method can read the client IP address from the "X-Forwarded-For" header
 * when trusted proxies were set via "setTrustedProxies()". The "X-Forwarded-For"
 * header value is a comma+space separated list of IP addresses, the left-most
 * being the original client, and each successive proxy that passed the request
 * adding the IP address where it received the request from.
 *
 * If your reverse proxy uses a different header name than "X-Forwarded-For",
 * ("Client-Ip" for instance), configure it via "setTrustedHeaderName()" with
 * the "client-ip" key.
 *
 * @param array $server
 * @param array $trustedProxies
 *
 * @return string The client IP address
 *
 * @see getClientIps()
 * @see https://github.com/symfony/symfony/blob/0b39ce23150c34c990e3eccfae4e375161c0d352/src/Symfony/Component/HttpFoundation/Request.php#L886
 * @see http://en.wikipedia.org/wiki/X-Forwarded-For
 *
 */
function getClientIp(array $server, array $trustedProxies = []) : string
{
    $ipAddresses = getClientIps($server, $trustedProxies);
    return $ipAddresses[0];
}

/**
 * Checks if an IPv4 or IPv6 address is contained in the list of given IPs or subnets.
 *
 * @param string $requestIp IP to check
 * @param string|array $ips List of IPs or subnets (can be a string if only a single one)
 *
 * @return bool Whether the IP is valid
 * @see https://github.com/symfony/http-foundation/blob/master/IpUtils.php
 */
function checkIp($requestIp, $ips) : bool
{
    if (empty($ips)) {
        return false;
    }
    if (!is_array($ips)) {
        $ips = array($ips);
    }
    $method = substr_count($requestIp, ':') > 1 ? 'checkIp6' : 'checkIp4';
    foreach ($ips as $ip) {
        if ($method($requestIp, $ip)) {
            return true;
        }
    }
    return false;
}

/**
 * Compares two IPv4 addresses.
 * In case a subnet is given, it checks if it contains the request IP.
 *
 * @param string $requestIp IPv4 address to check
 * @param string $ip IPv4 address or subnet in CIDR notation
 *
 * @return bool Whether the request IP matches the IP, or whether the request IP is within the CIDR subnet
 * @see https://github.com/symfony/http-foundation/blob/master/IpUtils.php
 */
function checkIp4($requestIp, $ip) : bool
{
    if (false !== strpos($ip, '/')) {
        list($address, $netmask) = explode('/', $ip, 2);
        if ($netmask === '0') {
            // Ensure IP is valid - using ip2long below implicitly validates, but we need to do it manually here
            return filter_var($address, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4);
        }
        if ($netmask < 0 || $netmask > 32) {
            return false;
        }
    } else {
        $address = $ip;
        $netmask = 32;
    }
    return 0 === substr_compare(sprintf('%032b', ip2long($requestIp)), sprintf('%032b', ip2long($address)), 0,
        $netmask);
}

/**
 * Compares two IPv6 addresses.
 * In case a subnet is given, it checks if it contains the request IP.
 *
 * @author David Soria Parra <dsp at php dot net>
 *
 * @see https://github.com/symfony/http-foundation/blob/master/IpUtils.php
 * @see https://github.com/dsp/v6tools
 *
 * @param string $requestIp IPv6 address to check
 * @param string $ip IPv6 address or subnet in CIDR notation
 *
 * @return bool Whether the IP is valid
 *
 * @throws \RuntimeException When IPV6 support is not enabled
 */
function checkIp6($requestIp, $ip) : bool
{
    if (!((extension_loaded('sockets') && defined('AF_INET6')) || @inet_pton('::1'))) {
        throw new \RuntimeException('Unable to check Ipv6. Check that PHP was not compiled with option "disable-ipv6".');
    }
    if (false !== strpos($ip, '/')) {
        list($address, $netmask) = explode('/', $ip, 2);
        if ($netmask < 1 || $netmask > 128) {
            return false;
        }
    } else {
        $address = $ip;
        $netmask = 128;
    }
    $bytesAddr = unpack('n*', @inet_pton($address));
    $bytesTest = unpack('n*', @inet_pton($requestIp));
    if (empty($bytesAddr) || empty($bytesTest)) {
        return false;
    }
    for ($i = 1, $ceil = ceil($netmask / 16); $i <= $ceil; ++$i) {
        $left = $netmask - 16 * ($i - 1);
        $left = ($left <= 16) ? $left : 16;
        $mask = ~(0xffff >> $left) & 0xffff;
        if (($bytesAddr[$i] & $mask) != ($bytesTest[$i] & $mask)) {
            return false;
        }
    }
    return true;
}

/**
 * Check if $ip is contained in $trustedProxies array.
 * @param array $trustedProxies
 * @param $ip
 * @return bool
 */
function isFromTrustedProxy(array $trustedProxies, $ip)
{
    return !empty($trustedProxies) && checkIp($ip, $trustedProxies);
}

/**
 * Convert an IPv4 address to IPv6
 *
 * @param string IP Address in dot notation (192.168.1.100)
 * @return string IPv6 formatted address or false if invalid input
 * @see http://stackoverflow.com/questions/444966/working-with-ipv6-addresses-in-php
 */
function iPv4To6($ip)
{
    static $Mask = '::ffff:'; // This tells IPv6 it has an IPv4 address
    $IPv6 = (strpos($ip, '::') === 0);
    $IPv4 = (strpos($ip, '.') > 0);

    if (!$IPv4 && !$IPv6) {
        return false;
    }
    if ($IPv6 && $IPv4) {
        // Strip IPv4 Compatibility notation
        $ip = substr($ip, strrpos($ip, ':') + 1);
    } elseif (!$IPv4) {
        // Seems to be IPv6 already?
        return $ip;
    }
    $ip = array_pad(explode('.', $ip), 4, 0);
    if (count($ip) > 4) {
        return false;
    }
    for ($i = 0; $i < 4; $i++) {
        if ($ip[$i] > 255) {
            return false;
        }
    }

    $Part7 = base_convert(($ip[0] * 256) + $ip[1], 10, 16);
    $Part8 = base_convert(($ip[2] * 256) + $ip[3], 10, 16);
    return $Mask . $Part7 . ':' . $Part8;
}

/**
 * Replace '::' with appropriate number of ':0'
 * @param $ip
 * @return mixed|string
 * @see http://stackoverflow.com/questions/12095835/quick-way-of-expanding-ipv6-addresses-with-php
 */
function expandIPv6Notation($ip)
{
    if (!iPv4To6($ip)) {
        return $ip;
    }
    $hex = unpack("H*hex", inet_pton($ip));
    $ip = substr(preg_replace("/([A-f0-9]{4})/", "$1:", $hex['hex']), 0, -1);
    return $ip;
}

/**
 * decbin32
 * In order to simplify working with IP addresses (in binary) and their
 * netmasks, it is easier to ensure that the binary strings are padded
 * with zeros out to 32 characters - IP addresses are 32 bit numbers
 *
 * @param $dec
 * @return string
 */
function decbin32 ($dec)
{
    return str_pad(decbin($dec), 32, '0', STR_PAD_LEFT);
}

/**
 * ipInRange
 *
 * Function to determine if an IP is located in a
 * specific range as specified via several alternative formats.
 *
 * This function takes 2 arguments, an IP address and a "range" in several* different formats.
 *
 * Network ranges can be specified as:
 * 1. Wildcard format:     1.2.3.*
 * 2. CIDR format:         1.2.3/24  OR  1.2.3.4/255.255.255.0
 * 3. Start-End IP format: 1.2.3.0-1.2.3.255
 *
 * Return value BOOLEAN : ipInRange($ip, $range);
 * The function will return true if the supplied IP is within the range.
 *
 * Note little validation is done on the range inputs - it expects you to use one of the above 3 formats.
 *
 * Copyright 2008: Paul Gregg <[email protected]>
 * 10 January 2008
 * Version: 1.2
 *
 * Source website: http://www.pgregg.com/projects/php/ip_in_range/
 * Version 1.2
 *
 * This software is Donationware - if you feel you have benefited from
 * the use of this tool then please consider a donation. The value of
 * which is entirely left up to your discretion.
 * http://www.pgregg.com/donate/
 *
 * Please do not remove this header, or source attibution from this file.
 *
 * @param $ip
 * @param $range Network ranges can be specified as: 1. Wildcard format 1.2.3.*, 2. CIDR format: 1.2.3/24  OR  1.2.3.4/255.255.255.0, 3. Start-End IP format 1.2.3.0-1.2.3.255
 * @return bool The function will return true if the supplied IP is within the range.
 */
function ipInRange($ip, $range) : bool
{
    if(!is_string($ip) || !is_string($range)){
        return false;
    }

    if (strpos($range, '/') !== false) {
        // $range is in IP/NETMASK format
        list($range, $netmask) = explode('/', $range, 2);
        if (strpos($netmask, '.') !== false) {
            // $netmask is a 255.255.0.0 format
            $netmask = str_replace('*', '0', $netmask);
            $netmask_dec = ip2long($netmask);
            return ( (ip2long($ip) & $netmask_dec) == (ip2long($range) & $netmask_dec) );
        } else {
            // $netmask is a CIDR size block
            // fix the range argument
            $x = explode('.', $range);
            while(count($x)<4) $x[] = '0';
            list($a,$b,$c,$d) = $x;
            $range = sprintf("%u.%u.%u.%u", empty($a)?'0':$a, empty($b)?'0':$b,empty($c)?'0':$c,empty($d)?'0':$d);
            $range_dec = ip2long($range);
            $ip_dec = ip2long($ip);

            # Strategy 1 - Create the netmask with 'netmask' 1s and then fill it to 32 with 0s
            #$netmask_dec = bindec(str_pad('', $netmask, '1') . str_pad('', 32-$netmask, '0'));


            # Strategy 2 - Use math to create it
            $wildcard_dec = pow(2, (32-$netmask)) - 1;
            $netmask_dec = ~ $wildcard_dec;

            return (($ip_dec & $netmask_dec) == ($range_dec & $netmask_dec));
        }
    } else {
        // range might be 255.255.*.* or 1.2.3.0-1.2.3.255

        if (strpos($range, '*') !==false) { // a.b.*.* format
            // Just convert to A-B format by setting * to 0 for A and 255 for B
            $lower = str_replace('*', '0', $range);
            $upper = str_replace('*', '255', $range);
            $range = "$lower-$upper";
        }

        if (strpos($range, '-')!==false) { // A-B format
            list($lower, $upper) = explode('-', $range, 2);
            $lower_dec = (float)sprintf("%u",ip2long($lower));
            $upper_dec = (float)sprintf("%u",ip2long($upper));
            $ip_dec = (float)sprintf("%u",ip2long($ip));
            return ( ($ip_dec>=$lower_dec) && ($ip_dec<=$upper_dec) );
        }
        return false;
    }
}


1		<?php
2
3		/**
4		* get Client IP. DEPRECATED! use getClientIP().
5		* @param array $server
6		* @return string
7		* @deprecated
8		* @see getClientIp();
9		*/
10		function getIPVisitor(array $server = []) : string
11		{
12		$IP2Check = '';
13		if (array_key_exists('HTTP_X_FORWARDED_FOR', $server) && trim($server['HTTP_X_FORWARDED_FOR']) != '') {
14		$IP2Check = $server['HTTP_X_FORWARDED_FOR'];
15		} elseif (array_key_exists('REMOTE_ADDR', $server) && trim($server['REMOTE_ADDR'])) {
16		$IP2Check = $server['REMOTE_ADDR'];
17		}
18
19		if (strpos($IP2Check, ',') === false) {
20		return $IP2Check;
21		}
22
23		// Header can contain multiple IP-s of proxies that are passed through.
24		// Only the IP added by the last proxy (last IP in the list) can be trusted.
25		$arrIps = explode(',', $IP2Check);
26		if (!is_array($arrIps) \|\| count($arrIps) < 1) {
27		return '';
28		}
29
30		return trim(head($arrIps));
31		}
32
33		/**
34		* anonimizeIp masquerade last digit of IP address.
35		* With bad ip argument return 0.0.0.0
36		* Support IPv4, Ipv6 and IPv4 Compatibility.
37		* @param string $ip
38		* @return string masked IP
39		*/
40		function anonimizeIp(string $ip) : string
41		{
42		if (isIPv4($ip)) {
43		return anonimizeIpv4($ip);
44		} elseif (isIPv4Compatibility($ip)) {
45		return anonimizeIpv4Compatibility($ip);
46		}
47		return anonimizeIpv6($ip);
48		}
49
50		/**
51		* masquerade last digit of IP address.
52		* With bad ip argument return 0.0.0.0
53		* @param string $ip
54		* @return string
55		*/
56		function anonimizeIpv4Compatibility(string $ip):string
57		{
58	View Code Duplication	if (isIPv4Compatibility($ip)) {
59		return substr($ip, 0, strrpos($ip, ".") + 1) . '0';
60		}
61		return '0.0.0.0';
62		}
63
64		/**
65		* masquerade last digit of IP address with inet php functions.
66		* With bad ip argument return 0.0.0.0
67		* @param string $ip
68		* @return string
69		*/
70		function anonimizeIpWithInet(string $ip):string
71		{
72		if ($ip = @inet_pton($ip)) {
73		return inet_ntop(substr($ip, 0, strlen($ip) / 2) . str_repeat(chr(0), strlen($ip) / 2));
74		}
75		return '0.0.0.0';
76		}
77
78		/**
79		* masquerade last digit of IP address.
80		* With bad ip argument return 0.0.0.0
81		* @param string $ip
82		* @return string
83		*/
84		function anonimizeIpv6(string $ip):string
85		{
86		if (strrpos($ip, ":") > 0) {
87		return substr($ip, 0, strrpos($ip, ":") + 1) . '0';
88		}
89		return '0.0.0.0';
90		}
91
92		/**
93		* masquerade last digit of IP address.
94		* With bad ip argument return 0.0.0.0
95		* @param string $ip
96		* @return string
97		*/
98		function anonimizeIpv4(string $ip):string
99		{
100	View Code Duplication	if (isIPv4($ip)) {
101		return substr($ip, 0, strrpos($ip, ".") + 1) . '0';
102		}
103		return '0.0.0.0';
104		}
105
106		/**
107		* getHost Get the Internet host name corresponding to a given IP address
108		* @param string $ip the IP to resolve.
109		* @return string Returns the host name of the Internet host specified by ip_address on success,
110		* the unmodified ip_address on failure,
111		* or FALSE on malformed input.
112		*/
113		function getHost($ip)
114		{
115		return gethostbyaddr($ip);
116		}
117
118		/**
119		* Returns the client IP addresses.
120		*
121		* In the returned array the most trusted IP address is first, and the
122		* least trusted one last. The "real" client IP address is the last one,
123		* but this is also the least trusted one.
124		* Trusted proxies are stripped if passed.
125		*
126		* Use this method carefully; you should use getClientIp() instead.
127		*
128		* @param array $server
129		* @param array $trustedProxies
130		*
131		* @return array The client IP addresses
132		*
133		* @see getClientIp()
134		* @see https://github.com/symfony/symfony/blob/0b39ce23150c34c990e3eccfae4e375161c0d352/src/Symfony/Component/HttpFoundation/Request.php#L831
135		*/
136		function getClientIps(array $server, array $trustedProxies = []) : array
137		{
138		if (empty($server)) {
139		return [''];
140		}
141		$clientIps = array();
142		$ip = $server['REMOTE_ADDR'];
143		if (!isFromTrustedProxy($trustedProxies, $ip)) {
144		return array($ip);
145		}
146		if (array_key_exists('FORWARDED', $server) && trim($server['FORWARDED']) != '') {
147		$forwardedHeader = $server['FORWARDED'];
148		preg_match_all('{(for)=("?\[?)([a-z0-9\.:_\-/]*)}', $forwardedHeader, $matches);
149		$clientIps = $matches[3];
150		} elseif (array_key_exists('X_FORWARDED_FOR', $server) && trim($server['X_FORWARDED_FOR']) != '') {
151		$clientIps = array_map('trim', explode(',', $server['X_FORWARDED_FOR']));
152		}
153		$clientIps[] = $ip; // Complete the IP chain with the IP the request actually came from
154		$ip = $clientIps[0]; // Fallback to this when the client IP falls into the range of trusted proxies
155		foreach ($clientIps as $key => $clientIp) {
156		// Remove port (unfortunately, it does happen)
157		if (preg_match('{((?:\d+\.){3}\d+)\:\d+}', $clientIp, $match)) {
158		$clientIps[$key] = $clientIp = $match[1];
159		}
160		if (checkIp($clientIp, $trustedProxies)) {
161		unset($clientIps[$key]);
162		}
163		}
164		// Now the IP chain contains only untrusted proxies and the client IP
165		return $clientIps ? array_reverse($clientIps) : array($ip);
166		}
167
168		/**
169		* Returns the client IP address.
170		*
171		* This method can read the client IP address from the "X-Forwarded-For" header
172		* when trusted proxies were set via "setTrustedProxies()". The "X-Forwarded-For"
173		* header value is a comma+space separated list of IP addresses, the left-most
174		* being the original client, and each successive proxy that passed the request
175		* adding the IP address where it received the request from.
176		*
177		* If your reverse proxy uses a different header name than "X-Forwarded-For",
178		* ("Client-Ip" for instance), configure it via "setTrustedHeaderName()" with
179		* the "client-ip" key.
180		*
181		* @param array $server
182		* @param array $trustedProxies
183		*
184		* @return string The client IP address
185		*
186		* @see getClientIps()
187		* @see https://github.com/symfony/symfony/blob/0b39ce23150c34c990e3eccfae4e375161c0d352/src/Symfony/Component/HttpFoundation/Request.php#L886
188		* @see http://en.wikipedia.org/wiki/X-Forwarded-For
189		*
190		*/
191		function getClientIp(array $server, array $trustedProxies = []) : string
192		{
193		$ipAddresses = getClientIps($server, $trustedProxies);
194		return $ipAddresses[0];
195		}
196
197		/**
198		* Checks if an IPv4 or IPv6 address is contained in the list of given IPs or subnets.
199		*
200		* @param string $requestIp IP to check
201		* @param string\|array $ips List of IPs or subnets (can be a string if only a single one)
202		*
203		* @return bool Whether the IP is valid
204		* @see https://github.com/symfony/http-foundation/blob/master/IpUtils.php
205		*/
206		function checkIp($requestIp, $ips) : bool
207		{
208		if (empty($ips)) {
209		return false;
210		}
211		if (!is_array($ips)) {
212		$ips = array($ips);
213		}
214		$method = substr_count($requestIp, ':') > 1 ? 'checkIp6' : 'checkIp4';
215		foreach ($ips as $ip) {
216		if ($method($requestIp, $ip)) {
217		return true;
218		}
219		}
220		return false;
221		}
222
223		/**
224		* Compares two IPv4 addresses.
225		* In case a subnet is given, it checks if it contains the request IP.
226		*
227		* @param string $requestIp IPv4 address to check
228		* @param string $ip IPv4 address or subnet in CIDR notation
229		*
230		* @return bool Whether the request IP matches the IP, or whether the request IP is within the CIDR subnet
231		* @see https://github.com/symfony/http-foundation/blob/master/IpUtils.php
232		*/
233		function checkIp4($requestIp, $ip) : bool
234		{
235		if (false !== strpos($ip, '/')) {
236		list($address, $netmask) = explode('/', $ip, 2);
237		if ($netmask === '0') {
238		// Ensure IP is valid - using ip2long below implicitly validates, but we need to do it manually here
239		return filter_var($address, FILTER_VALIDATE_IP, FILTER_FLAG_IPV4);
240		}
241		if ($netmask < 0 \|\| $netmask > 32) {
242		return false;
243		}
244		} else {
245		$address = $ip;
246		$netmask = 32;
247		}
248		return 0 === substr_compare(sprintf('%032b', ip2long($requestIp)), sprintf('%032b', ip2long($address)), 0,
249		$netmask);
250		}
251
252		/**
253		* Compares two IPv6 addresses.
254		* In case a subnet is given, it checks if it contains the request IP.
255		*
256		* @author David Soria Parra <dsp at php dot net>
257		*
258		* @see https://github.com/symfony/http-foundation/blob/master/IpUtils.php
259		* @see https://github.com/dsp/v6tools
260		*
261		* @param string $requestIp IPv6 address to check
262		* @param string $ip IPv6 address or subnet in CIDR notation
263		*
264		* @return bool Whether the IP is valid
265		*
266		* @throws \RuntimeException When IPV6 support is not enabled
267		*/
268		function checkIp6($requestIp, $ip) : bool
269		{
270		if (!((extension_loaded('sockets') && defined('AF_INET6')) \|\| @inet_pton('::1'))) {
271		throw new \RuntimeException('Unable to check Ipv6. Check that PHP was not compiled with option "disable-ipv6".');
272		}
273		if (false !== strpos($ip, '/')) {
274		list($address, $netmask) = explode('/', $ip, 2);
275		if ($netmask < 1 \|\| $netmask > 128) {
276		return false;
277		}
278		} else {
279		$address = $ip;
280		$netmask = 128;
281		}
282		$bytesAddr = unpack('n*', @inet_pton($address));
283		$bytesTest = unpack('n*', @inet_pton($requestIp));
284		if (empty($bytesAddr) \|\| empty($bytesTest)) {
285		return false;
286		}
287		for ($i = 1, $ceil = ceil($netmask / 16); $i <= $ceil; ++$i) {
288		$left = $netmask - 16 * ($i - 1);
289		$left = ($left <= 16) ? $left : 16;
290		$mask = ~(0xffff >> $left) & 0xffff;
291		if (($bytesAddr[$i] & $mask) != ($bytesTest[$i] & $mask)) {
292		return false;
293		}
294		}
295		return true;
296		}
297
298		/**
299		* Check if $ip is contained in $trustedProxies array.
300		* @param array $trustedProxies
301		* @param $ip
302		* @return bool
303		*/
304		function isFromTrustedProxy(array $trustedProxies, $ip)
305		{
306		return !empty($trustedProxies) && checkIp($ip, $trustedProxies);
307		}
308
309		/**
310		* Convert an IPv4 address to IPv6
311		*
312		* @param string IP Address in dot notation (192.168.1.100)
313		* @return string IPv6 formatted address or false if invalid input
314		* @see http://stackoverflow.com/questions/444966/working-with-ipv6-addresses-in-php
315		*/
316		function iPv4To6($ip)
317		{
318		static $Mask = '::ffff:'; // This tells IPv6 it has an IPv4 address
319		$IPv6 = (strpos($ip, '::') === 0);
320		$IPv4 = (strpos($ip, '.') > 0);
321
322		if (!$IPv4 && !$IPv6) {
323		return false;
324		}
325		if ($IPv6 && $IPv4) {
326		// Strip IPv4 Compatibility notation
327		$ip = substr($ip, strrpos($ip, ':') + 1);
328		} elseif (!$IPv4) {
329		// Seems to be IPv6 already?
330		return $ip;
331		}
332		$ip = array_pad(explode('.', $ip), 4, 0);
333		if (count($ip) > 4) {
334		return false;
335		}
336		for ($i = 0; $i < 4; $i++) {
337		if ($ip[$i] > 255) {
338		return false;
339		}
340		}
341
342		$Part7 = base_convert(($ip[0] * 256) + $ip[1], 10, 16);
343		$Part8 = base_convert(($ip[2] * 256) + $ip[3], 10, 16);
344		return $Mask . $Part7 . ':' . $Part8;
345		}
346
347		/**
348		* Replace '::' with appropriate number of ':0'
349		* @param $ip
350		* @return mixed\|string
351		* @see http://stackoverflow.com/questions/12095835/quick-way-of-expanding-ipv6-addresses-with-php
352		*/
353		function expandIPv6Notation($ip)
354		{
355		if (!iPv4To6($ip)) {
356		return $ip;
357		}
358		$hex = unpack("H*hex", inet_pton($ip));
359		$ip = substr(preg_replace("/([A-f0-9]{4})/", "$1:", $hex['hex']), 0, -1);
360		return $ip;
361		}
362
363		/**
364		* decbin32
365		* In order to simplify working with IP addresses (in binary) and their
366		* netmasks, it is easier to ensure that the binary strings are padded
367		* with zeros out to 32 characters - IP addresses are 32 bit numbers
368		*
369		* @param $dec
370		* @return string
371		*/
372		function decbin32 ($dec)
373		{
374		return str_pad(decbin($dec), 32, '0', STR_PAD_LEFT);
375		}
376
377		/**
378		* ipInRange
379		*
380		* Function to determine if an IP is located in a
381		* specific range as specified via several alternative formats.
382		*
383		* This function takes 2 arguments, an IP address and a "range" in several* different formats.
384		*
385		* Network ranges can be specified as:
386		* 1. Wildcard format: 1.2.3.*
387		* 2. CIDR format: 1.2.3/24 OR 1.2.3.4/255.255.255.0
388		* 3. Start-End IP format: 1.2.3.0-1.2.3.255
389		*
390		* Return value BOOLEAN : ipInRange($ip, $range);
391		* The function will return true if the supplied IP is within the range.
392		*
393		* Note little validation is done on the range inputs - it expects you to use one of the above 3 formats.
394		*
395		* Copyright 2008: Paul Gregg <[email protected]>
396		* 10 January 2008
397		* Version: 1.2
398		*
399		* Source website: http://www.pgregg.com/projects/php/ip_in_range/
400		* Version 1.2
401		*
402		* This software is Donationware - if you feel you have benefited from
403		* the use of this tool then please consider a donation. The value of
404		* which is entirely left up to your discretion.
405		* http://www.pgregg.com/donate/
406		*
407		* Please do not remove this header, or source attibution from this file.
408		*
409		* @param $ip
410		* @param $range Network ranges can be specified as: 1. Wildcard format 1.2.3.*, 2. CIDR format: 1.2.3/24 OR 1.2.3.4/255.255.255.0, 3. Start-End IP format 1.2.3.0-1.2.3.255
411		* @return bool The function will return true if the supplied IP is within the range.
412		*/
413		function ipInRange($ip, $range) : bool
414		{
415		if(!is_string($ip) \|\| !is_string($range)){
416		return false;
417		}
418
419		if (strpos($range, '/') !== false) {
420		// $range is in IP/NETMASK format
421		list($range, $netmask) = explode('/', $range, 2);
422		if (strpos($netmask, '.') !== false) {
423		// $netmask is a 255.255.0.0 format
424		$netmask = str_replace('*', '0', $netmask);
425		$netmask_dec = ip2long($netmask);
426		return ( (ip2long($ip) & $netmask_dec) == (ip2long($range) & $netmask_dec) );
427		} else {
428		// $netmask is a CIDR size block
429		// fix the range argument
430		$x = explode('.', $range);
431		while(count($x)<4) $x[] = '0';
432		list($a,$b,$c,$d) = $x;
433		$range = sprintf("%u.%u.%u.%u", empty($a)?'0':$a, empty($b)?'0':$b,empty($c)?'0':$c,empty($d)?'0':$d);
434		$range_dec = ip2long($range);
435		$ip_dec = ip2long($ip);
436
437		# Strategy 1 - Create the netmask with 'netmask' 1s and then fill it to 32 with 0s
438		#$netmask_dec = bindec(str_pad('', $netmask, '1') . str_pad('', 32-$netmask, '0'));
		0 ignored issues – show Unused Code Comprehensibility introduced 2017-08-09 14:08 UTC by Report Bug Copy Issue Report `58%` of this comment could be valid code. Did you maybe forget this after debugging? Sometimes obsolete code just ends up commented out instead of removed. In this case it is better to remove the code once you have checked you do not need it. The code might also have been commented out for debugging purposes. In this case it is vital that someone uncomments it again or your project may behave in very unexpected ways in production. This check looks for comments that seem to be mostly valid code and reports them. Loading history...
439
440		# Strategy 2 - Use math to create it
441		$wildcard_dec = pow(2, (32-$netmask)) - 1;
442		$netmask_dec = ~ $wildcard_dec;
443
444		return (($ip_dec & $netmask_dec) == ($range_dec & $netmask_dec));
445		}
446		} else {
447		// range might be 255.255.. or 1.2.3.0-1.2.3.255
		0 ignored issues – show Unused Code Comprehensibility introduced 2017-08-09 14:08 UTC by Report Bug Copy Issue Report `37%` of this comment could be valid code. Did you maybe forget this after debugging? Sometimes obsolete code just ends up commented out instead of removed. In this case it is better to remove the code once you have checked you do not need it. The code might also have been commented out for debugging purposes. In this case it is vital that someone uncomments it again or your project may behave in very unexpected ways in production. This check looks for comments that seem to be mostly valid code and reports them. Loading history...
448		if (strpos($range, '') !==false) { // a.b..* format
449		// Just convert to A-B format by setting * to 0 for A and 255 for B
450		$lower = str_replace('*', '0', $range);
451		$upper = str_replace('*', '255', $range);
452		$range = "$lower-$upper";
453		}
454
455		if (strpos($range, '-')!==false) { // A-B format
456		list($lower, $upper) = explode('-', $range, 2);
457		$lower_dec = (float)sprintf("%u",ip2long($lower));
458		$upper_dec = (float)sprintf("%u",ip2long($upper));
459		$ip_dec = (float)sprintf("%u",ip2long($ip));
460		return ( ($ip_dec>=$lower_dec) && ($ip_dec<=$upper_dec) );
461		}
462		return false;
463		}
464		}
465

padosoft / support

Push — master ( 47bfcf...552113 )

ip.php ➔ ipInRange() C

Complexity

Size

Duplication

Importance

How to fix Long Method Complexity

Long Method

Duplication Side-by-Side

Filter issues like