Block ip address from accessing page

[anitha_p]

I would like to block all ip addresses for my pages except for the addresses which are in my room which start with say ex. 123.456..

I know that we can block using
if ($REMOTE_ADDR != "123.456.%.%")

// if acess is denied redirecting the user to this page

{ header ("Location: http://www.yahoo.com");

exit;

}
?>

Ok! what I am unsure about this is the 123.456.%.% I did block ip addresses before liek 1 0r 2 by specifying the entire number instead of %.
My question is how do I block all users expect those accesing from ip address starting 123.456

Thanks in advance
Anitha
😕

[jerdo]

You could try:

if (!preg_match("/^123\.456/",$_SERVER['REMOTE_ADDR']))

Or you could use strstr() or ereg_match()

[anitha_p]

Thank you so much!!!!! It worked Thanks
Anitha

[shantanuo]

Hi,
Is it possible to protecting all files without updating those files?
I mean is it possible to simply update .htaccess file and block all directories below it?

Shantanu Oak

[suntra]

There is a BIG security hole in your script. DON'T use $REMOTE_ADDR because it can be changed in the query string. Use, instead, $SERVER["REMOTE_ADDR"] like shantanuo used it. $SERVER["REMOTE_ADDR"] is more difficult to hack than $REMOTE_ADDR...

[jimson]

block the ip if you are using the apache, use the httpd.conf to block the ip...