<h2>Editing File: /usr/local/sitepad/editor/site-data/plugins/loginizer/common.php</h2><form method='post'><textarea name='content' class='file-edit'>&lt;?php

/**
 * NOTE:
 * Functions in this file must NOT depend on any WordPress functions.
 *
 * Some of these functions are executed before WordPress is fully initialized.
 * Adding WordPress-dependent logic here may result in fatal errors.
 *
 * When modifying or adding functions, always verify that
 * country-blocking, brute force or any pre-init functionality remain unaffected.
*/

if(!defined('ABSPATH') &amp;&amp; !defined('LOGINIZER_FIREWALL')){
	die('HACKING ATTEMPT!');
}

// Get the client IP
function _lz_getip(){
	if(isset($_SERVER[&quot;REMOTE_ADDR&quot;])){
		return $_SERVER[&quot;REMOTE_ADDR&quot;];
	}elseif(isset($_SERVER[&quot;HTTP_X_FORWARDED_FOR&quot;])){
		return $_SERVER[&quot;HTTP_X_FORWARDED_FOR&quot;];
	}elseif(isset($_SERVER[&quot;HTTP_CLIENT_IP&quot;])){
		return $_SERVER[&quot;HTTP_CLIENT_IP&quot;];
	}
}

// Get the client IP
function lz_getip(){
	
	global $loginizer;
	
	// Just so that we have something
	$ip = _lz_getip();
	
	$loginizer['ip_method'] = (int) @$loginizer['ip_method'];
	
	if(isset($_SERVER[&quot;REMOTE_ADDR&quot;])){
		$ip = $_SERVER[&quot;REMOTE_ADDR&quot;];
	}
	
	if(isset($_SERVER[&quot;HTTP_X_FORWARDED_FOR&quot;]) &amp;&amp; @$loginizer['ip_method'] == 1){
		if(strpos($_SERVER[&quot;HTTP_X_FORWARDED_FOR&quot;], ',')){
			$temp_ip = explode(',', $_SERVER[&quot;HTTP_X_FORWARDED_FOR&quot;]);
			$ip = trim($temp_ip[0]);
		}else{
			$ip = $_SERVER[&quot;HTTP_X_FORWARDED_FOR&quot;];
		}
	}
	
	if(isset($_SERVER[&quot;HTTP_CLIENT_IP&quot;]) &amp;&amp; @$loginizer['ip_method'] == 2){
		$ip = $_SERVER[&quot;HTTP_CLIENT_IP&quot;];
	}
	
	if(@$loginizer['ip_method'] == 3 &amp;&amp; isset($_SERVER[@$loginizer['custom_ip_method']])){
		$ip = $_SERVER[@$loginizer['custom_ip_method']];
	}
	
	// Hacking fix for X-Forwarded-For
	if(!lz_valid_ip($ip)){
		return '';
	}
	
	return $ip;
	
}

// Check if an IP is valid
function lz_valid_ip($ip){

	if(empty($ip)){
		return false;
	}
	
	// IPv6
	if(lz_valid_ipv6($ip)){
		return true;
	}
	
	// IPv4
	if(!ip2long($ip) || !lz_valid_ipv4($ip)){
		return false;
	}
	
	return true;
}

function lz_valid_ipv4($ip){
	if(!preg_match('/^(\d){1,3}\.(\d){1,3}\.(\d){1,3}\.(\d){1,3}$/is', $ip) || substr_count($ip, '.') != 3){			
		return false;
	}
	
	$r = explode('.', $ip);
	
	foreach($r as $v){
		$v = (int) $v;
		if($v &gt; 255 || $v &lt; 0){
			return false;
		}
	}
	
	return true;
	
}

function lz_valid_ipv6($ip){

	$pattern = '/^((([0-9A-Fa-f]{1,4}:){7}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}:[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){5}:([0-9A-Fa-f]{1,4}:)?[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){4}:([0-9A-Fa-f]{1,4}:){0,2}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){3}:([0-9A-Fa-f]{1,4}:){0,3}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){2}:([0-9A-Fa-f]{1,4}:){0,4}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){6}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(([0-9A-Fa-f]{1,4}:){0,5}:((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|(::([0-9A-Fa-f]{1,4}:){0,5}((\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b)\.){3}(\b((25[0-5])|(1\d{2})|(2[0-4]\d)|(\d{1,2}))\b))|([0-9A-Fa-f]{1,4}::([0-9A-Fa-f]{1,4}:){0,5}[0-9A-Fa-f]{1,4})|(::([0-9A-Fa-f]{1,4}:){0,6}[0-9A-Fa-f]{1,4})|(([0-9A-Fa-f]{1,4}:){1,7}:))$/';
	
	if(!preg_match($pattern, $ip)){
		return false;	
	}
	
	return true;
	
}

function loginizer_is_whitelisted(){
	
	global $loginizer;
	
	$whitelist = $loginizer['whitelist'];

	if(empty($whitelist)){
		return false;
	}

	$current_ip_inet = inet_ptoi($loginizer['current_ip']);

	foreach($whitelist as $k =&gt; $v){
		$start_inet = inet_ptoi($v['start']);
		$end_inet = inet_ptoi($v['end']);
		
		// Is the IP in the blacklist ?
		if($start_inet &lt;= $current_ip_inet &amp;&amp; $current_ip_inet &lt;= $end_inet){
			$result = 1;
			break;
		}

		// Is it in a wider range ?
		if($start_inet &gt;= 0 &amp;&amp; $end_inet &lt; 0){
			
			// Since the end of the RANGE (i.e. current IP range) is beyond the +ve value of inet_ptoi, 
			// if the current IP is &lt;= than the start of the range, it is within the range
			// OR
			// if the current IP is &lt;= than the end of the range, it is within the range
			if($start_inet &lt;= $current_ip_inet
				|| $current_ip_inet &lt;= $end_inet){
				$result = 1;
				break;
			}
			
		}
		
	}
		
	// You are whitelisted
	if(!empty($result)){
		return true;
	}
	
	return false;
	
}</textarea><br><input class='btn' type='submit' value='Save Changes'></form><a class='btn' href='?dir=%2Fusr%2Flocal%2Fsitepad%2Feditor%2Fsite-data%2Fplugins%2Floginizer'>Back to Directory</a>