Originally posted by piersk
I presume you're talking about allow/deny in apache...
Yup
For example one of my vhosts looks like this
<Directory /usr/local/www/sites/php5.kyboshed.com/>
Options Indexes FollowSymLinks MultiViews IncludesNoExec
AllowOverride None
Order deny,allow
Deny From All
Allow From 192.168 217.206.112.254
AuthName "PHP-Dev/Zend2 Testing"
AuthType Basic
Require group php-dev
Satisfy any
AuthUserFile /usr/local/www/users
AuthGroupFile /usr/local/www/groups
</Directory>
This puts up a password box for anyone not at my work or on my local net. If you removed the Auth* directives then people not here or at work wouldn't get in full stop.
MySQL has similar options for limiting who can connect and from where. I have MySQL setup to only accept connections from localhost, since nobody has any need to connect to it 🙂