EllisLab/CodeIgniter — pull request #910 by narfbg (2012-01-10 13:59:02+00:00)
Title: Add header_ips config option and fix CI_Input::ip_address() (issue #907)

Changes include:

- Fixed issue #907 (add `$_SERVER['HTTP_X_CLUSTER_CLIENT_IP']` to accepted client IP headers).
- Fixed auto-trusting of `$_SERVER['HTTP_CLIENT_IP']` - this shouldn't happen unless specifically enabled.
- Changed handling of `$config['proxy_ips']` - array() values are now also accepted as well as strings. String lists should probably be deprecated - any thoughts?
- Added `$config['header_ips']` to enable/disable the use of `HTTP_X_FORWARDED_FOR`, `HTTP_CLIENT_IP`, `HTTP_X_CLUSTER_CLIENT_IP` independently from `$config['proxy_ips']` (defaults to `FALSE`).