restrict access by matching a static ip address

ishakya

Hi all,
our team have developed a web application to a particular company.that company is accessing the web application.That company maintain a static ip to log in.They have multiple computers in side that static ip address.Users can login to the system using their user name & passwords at any time & from any where.
So company management wants to allow their users to log to the system when they comes from their company static ip address. It means they cannot access to the system from outside of the company.So can i get the company static ip address from the login page????.
This what i have been thinking.....
Store the static ip address in the users table and match the ip address with the ip address got from the login page...

So to that i need to get ip address from login page.
any idea would be great.

Thanks in advance.......

leatherback

http://ro.php.net/manual/en/reserved.variables.server.php

REMOTE_HOST'
The Host name from which the user is viewing the current page. The reverse dns lookup is based off the REMOTE_ADDR of the user.

    Note: Your web server must be configured to create this variable. For example in Apache you'll need HostnameLookups On inside httpd.conf for it to exist. See also gethostbyaddr().

johanafm

I always have had other people doing these things for me, but wouldn't it be possible to create a .htaccess file in each directory that needs restrictions along the lines of

order deny,allow
deny from all
allow from example.com
allow from 192.168.0.1
allow from 192.168.1.

Allowing access from domain example.com, the specific address 192.168.0.1 and the network prefix 192.168.1.0

leatherback

nice !

ishakya

thanks guys...
but can u tell me how should i get the REMOTE_HOST value in the index page...

thanks in advance.

leatherback

.. I think I posted a link?

bradgrafelman

leatherback;10985058 wrote:
For example in Apache you'll need HostnameLookups On inside httpd.conf

... which is a very bad idea for any internet-facing production server since it's going to be spending a lot of time doing DNS lookups for every new IP it sees.

And besides, I thought we were talking about static IP addresses anyway? If so, the hostname would be irrelevant...

leatherback

it is actually an exact copy of the link provided, and I did not think this up. Maybe advice the providers of the manual at php.net that their text is incorrect?..

bradgrafelman

Their text is correct, simply because they never advise whether or not it's a good idea. :p

EDIT: Also, if the opinion of the software developers is indeed valued here, then this is what the Apache manual has to say about the HostnameLookups directive:

Apache Manual wrote:
The default is Off in order to save the network traffic for those sites that don't truly need the reverse lookups done. It is also better for the end users because they don't have to suffer the extra latency that a lookup entails. Heavily loaded sites should leave this directive Off, since DNS lookups can take considerable amounts of time.