Use REMOTE_ADDR which is more reliably set.
tree9c7cf2b7de3dbd0fda22787a74903f07f1e48517
-rw-r--r-- 58 .gitignore
-rw-r--r-- 1299 LICENSE.txt
-rw-r--r-- 2406 NEWS.txt
-rw-r--r-- 6381 README.txt
-rw-r--r-- 7087 csrf-magic.js
-rw-r--r-- 14006 csrf-magic.php
drwxr-xr-x - js-test
-rw-r--r-- 2330 test.php