[RESOLVED] Restrict Login Via IP Address

[jexx]

I'm using this script to do 2 things..

1. restrict access to specific IP addresses
2. connect to my mysql database.

<?php
$ips = array('192.168.100.50','192.168.100.51','::ffff:127.0.0.1');

foreach ($ips as $key) {

if ($_SERVER['REMOTE_ADDR'] == $key) {

$hostName = "localhost";
$userName = "admin";
$password = "password";
$dbName = "test";

mysql_connect($hostName, $userName, $password) or die("Unable to connect to host $hostName");

mysql_select_db($dbName) or die("Unable to select database $dbName"); 

} 
  }
?>

This page is called by all the other pages.. and works well.
If the IP is in the $ips array then the pages load fine, the mysql connects and all is well..

If they don't match the page still loads and gives mysql errors rendering it useless.

What I would prefer is if the IP Address isn't in the $ips array then the user is redirected to another web page /site (google)

Any ideas ? Thanks 🙂

[big_nerd]

<?php

$good = false; // if the IP is good, set it to no by default.

$ips = array('192.168.100.50','192.168.100.51','::ffff:127.0.0.1');

foreach ($ips as $key) {

if ($_SERVER['REMOTE_ADDR'] == $key) {
$good = true;
$hostName = "localhost";
$userName = "admin";
$password = "password";
$dbName = "test";

mysql_connect($hostName, $userName, $password) or die("Unable to connect to host $hostName");

mysql_select_db($dbName) or die("Unable to select database $dbName"); 

} 
  } 

if (!$good) die('Invalid IP');

?>

Or something like that, the die command will stop all scripts running, period.

[jexx]

Thanks..

Your first post I had already tried.

The edited version seems to work fine !! 🙂

Thanks

[laserlight]

Instead of using a loop, use [man]in_array/man.

That said, you should note that IP addresses can be spoofed, and if you want to extend the usage of this, it could lead to legitimate users being unable to access the script if their IP addresses are dynamically changed to one that is not white listed.

[jexx]

Thanks for the suggestion on in_array
I'll read up on that.

The script is running on my local server and is only for my use.
The server isn't on the internet.. but I thought I'd see if I could do a bit of basic IP authentication.

Cheers.