From a837c0c248fbec26d72e831af565f595b43ebcda Mon Sep 17 00:00:00 2001
From: lolcat <will@lolcat.ca>
Date: Sun, 11 Oct 2026 20:41:43 -0400
Subject: [PATCH] fix bug with forwarded ip not being passed

---
 lib/bot_protection.php | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/lib/bot_protection.php b/lib/bot_protection.php
index 9483f09..4e76de6 100644
--- a/lib/bot_protection.php
+++ b/lib/bot_protection.php
@@ -12,14 +12,14 @@ class bot_protection{
 				$source = $_SERVER["REMOTE_ADDR"];
 			}else{
 				
-				$source = $_SERVER[explode(";", strtoupper(str_replace("-", "_", config::IP_SOURCE)))[0]];
+				$source = $_SERVER["HTTP_" . explode(";", strtoupper(str_replace("-", "_", config::RATELIMIT_IP_SOURCE)))[0]];
 			}
 			
 			// check if its not a local IP. Probably local tor bridge, dont ratelimit
 			if(
 				filter_var(
-					$source, 
-					FILTER_VALIDATE_IP, 
+					$source,
+					FILTER_VALIDATE_IP,
 					FILTER_FLAG_NO_PRIV_RANGE | FILTER_FLAG_NO_RES_RANGE
 				) !== false
 			){
@@ -27,7 +27,7 @@ class bot_protection{
 				$source = "r." . $source;
 				
 				// counter
-				// resets on every req	
+				// resets on every req
 				$counter = apcu_fetch($source);
 				$counter = (int)$counter + 1;