From c8d92a63ef9b536b16dbe6ea24d8ee156653fac3 Mon Sep 17 00:00:00 2001 From: Damodar Lohani Date: Tue, 18 Nov 2025 07:46:53 +0000 Subject: [PATCH] validate IP --- app/init/resources.php | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/app/init/resources.php b/app/init/resources.php index 9e5c5f03b7..39ab32d6f6 100644 --- a/app/init/resources.php +++ b/app/init/resources.php @@ -695,6 +695,11 @@ App::setResource('geodb', function ($register) { App::setResource('geoRecord', function (Reader $geodb, Request $request, Locale $locale) { $ip = $request->getIp(); + + if (!filter_var($ip, FILTER_VALIDATE_IP)) { + Console::warning("Invalid IP address: {$ip}"); + $ip = '0.0.0.0'; // Use fallback IP + } $eu = Config::getParam('locale-eu'); $currencies = Config::getParam('locale-currencies');