Guestbook - IP blocking

[BIOSTALL]

Hey,

I wrote my guestbook script about 2 months ago and it works a treat but all of a sudden i've had sum idiots writing offensive/non-constructive posts. I am able to delete them but is a nuisance. I was wondering whehter there is any way of blocking these people from adding a post by getting there IP address or something and blocking it. Is this possible?? Thanks in advance!!

BIOSTALL

[Napster]

Use either, $REMOTE_ADDR if you have global variables on, otherwise use $_SERVER['REMOTE_ADDR'] to get his IP. If he has a static IP just go

if ($REMOTE_ADDR == "255.255.255.1") {

  die();

}

and replace 255.255.255.1 with his IP.

If he has dynamic IP, it is a bit trickier, but you take the first three numbers in his IP, and go like this

if (substr_count($REMOTE_ADDR,"255.255.255") > 0) {

  die();

}

This should ban him, but remember to replace 255.255.255 with the first three numbers in his IP.

[PickledOnion]

The problem with banning IP address by the first three number sets is that you then ban a lot of other people who are completely innocent

Many companies have a block of IPs that they use when their customers connect to the internet.

It is a problem and is not easily solved by blocking IP addresses. I had a similar problem on one of my sites and did just that (block the first three sets of digits) and then other people where blocked as well (check your apache logs to see the number of people using the same first 3 number sets, it's surprising how many do).

I ended up writing a membership script for those who wanted to add something. Another option I have done recently for a site is to allow people to post anything they want - it is then put in a databse with an 'allow' column which defaults to 'N'. An email goes to the site owner who can then log on to an admin area and quickly see any entries, check a tick box if it is OK and then submits. Those entries checked changes the databse from 'N' to 'Y' and it is then shown.

This doesn't actually take as long as you might think and she does check into the admin area a couple of times a day.

However, both are a bit laborious and detailed.

There is no easy solution that won't make the wrong people get banned. (AFAIK).

[Roger_Ramjet]

That is why forums and newsgroups often opt for moderation, it's the ONLY way to keep it legal and keep it clean.

IP blocking, cookies and the rest are so easily bypassed by anyone with a little knowledge, but the genuine user can end up blocked in all innocence if you try too hard.