Fix. Code. Edits ip resolving

Author: AntonV1211

lib/Cleantalk/Common/Helper.php

@@ -538,7 +538,8 @@ public static function ipV6Reduce($ip)
     public static function ipResolve($ip)
     {
         // Validate IP first
-        if (!self::ipValidate($ip)) {
+        $ip_version = self::ipValidate($ip);
+        if (!$ip_version) {
             return false;
         }
 
@@ -550,20 +551,42 @@ public static function ipResolve($ip)
             return false;
         }
 
-        // Forward DNS lookup (A/AAAA records) - verify the hostname points back to the IP
-        $forward_ips = gethostbynamel($hostname);
+        // Forward DNS lookup - use dns_get_record() to support both IPv4 (A) and IPv6 (AAAA) records
+        $record_type = ($ip_version === 'v6') ? DNS_AAAA : DNS_A;
+        $ip_field = ($ip_version === 'v6') ? 'ipv6' : 'ip';
+
+        $records = @dns_get_record($hostname, $record_type);
 
         // If forward lookup fails, we can't verify
-        if (!$forward_ips) {
+        if (!$records || !is_array($records)) {
+            return false;
+        }
+
+        // Extract IPs from DNS records
+        $forward_ips = array();
+        foreach ($records as $record) {
+            if (isset($record[$ip_field])) {
+                $forward_ips[] = $record[$ip_field];
+            }
+        }
+
+        if (empty($forward_ips)) {
             return false;
         }
 
         // Check if the original IP is in the list of IPs the hostname resolves to
-        if (in_array($ip, $forward_ips, true)) {
+        // For IPv6, normalize both for comparison
+        if ($ip_version === 'v6') {
+            $normalized_ip = self::ipV6Normalize($ip);
+            foreach ($forward_ips as $forward_ip) {
+                if (self::ipV6Normalize($forward_ip) === $normalized_ip) {
+                    return $hostname;
+                }
+            }
+        } elseif (in_array($ip, $forward_ips, true)) {
             return $hostname;
         }
 
-        // FCrDNS verification failed - possible PTR spoofing attempt
         return false;
     }