refs #8721

I tried to reproduce #8721 with the given server data from #8721 (comment)

I did not get 0.0.0.0 but it returned 82.197.211.195, 82.197.211.195 which is wrong as well as it should be 82.197.211.195.

Problem was it called

$excludedIps = array($defaultIp = '82.197.211.195')
Ip::getLastIpFromList($csv = '82.197.211.195, 82.197.211.195', $excludedIps);

In this case it returned 82.197.211.195, 82.197.211.195 as it did detect there were multiple IPs given but then returned the same $csv as non of them were allowed. The $defaultIp was the same as the ones specified in other headers from:

proxy_client_headers[] = "HTTP_X_FORWARDED_FOR"
proxy_client_headers[] = "HTTP_CF_CONNECTING_IP"
proxy_client_headers[] = "HTTP_CLIENT_IP"
proxy_client_headers[] = "REMOTE_ADDR";

$_SERVER['REMOTE_ADDR'] = '82.197.211.195';
$_SERVER['HTTP_X_FORWARDED_FOR'] = '82.197.211.195';
$_SERVER['HTTP_CF_CONNECTING_IP'] = '82.197.211.195';

In the users case it was actually not needed to specify multiple proxy_client_headers. I'm not sure if it will actually fix the issue but it was a bug