Kryptronic Software Support Forum

I removed your duplicate post from the main 9.0.2 thread and will address it here. 

How can we include the ip address of the device from which the request was made in the emails?

The browser and ip address are sent by the software when devices are actually authorized, or when an account is locked (bad logins, bad device auth attempts), just not on the device authorization request.  We can get this added to the device authorization code email in the next update.  I've put it on the list.

Until then, you could simply add a print statement with $_SERVER['REMOTE_ADDR'] somewhere in the mail that's sent (it's a BackEnd mail, so edit using Raw Database Admin -> core_mail table).

If you received a device authorization request, someone (hopefully you) has successfully logged in using your username or email and password, and the software is asking you to authorize the device by entering a code only sent to you via email before that login can be completed.  If you ever receive a device authorization request and you can't confirm the source, you need to change your password immediately.

While on the subject of emails, although I see the code below in ordersummaryxhtml.php, no K9 emails arrive with the referrer info even though it is present in the ecom_orders table. Any ideas why?

Referrer no longer means the referring URL.  Referrer tracks things like inbound Special Offers links, inbound Combo Promo links, inbound Extra Points links, locked affiliate id OR referring affiliate id.