Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Restrict access to functionality for user by IP address

Tags:

php

ip

anonymous

I have a website that allows a functionality for any user but each user is only allowed to use it a fixed amount of times.

Allow me to go into some more detail, our "anonymous/guest" user is allowed to search on the database for entries only 3 times per 24 hours. Is there a way I can use the IP to track the users attempts at this, restricting them after 3 attempts and then get it to expire after 24 hours?

The website is built in PHP but whatever language serves this functionality, I am open to it.

EDIT:

This idea comes from a client, they have a list of "stockists" stocking their products and they want to make this information available to users of the website. However, he doesn't want competitors taking advantage of his system and "undercutting" him on his stockists. Hence the restriction. If you can suggest a better way to achieve the same then that'd be amazing

Cheers, Dan

like image 727
Dan Hanly Avatar asked Feb 28 '11 10:02

Dan Hanly


People also ask

Can you restrict access to IP?

By restricting login access of a user by IP address, the user is unable to log in outside of the IP address ranges that you define. You can also specify global IP address ranges, which apply to all users. IP restrictions are checked on every page load.


1 Answers

You have to use the $_SERVER global variable, like this:

if ($_SERVER['REMOTE_ADDR'] == '127.0.0.1') {
  // restrict
}

But You have to consider kojiro's note: it's not a good idea to restrict by IP address.

Edit: to be constructive.

If you want to do it on low level, you can use cookies. These variables stored in the user's browser, if the user clear the cookies locally, he/she can override your restriction.
http://www.php.net/manual/en/function.setcookie.php

The better solution is to use sessions for this filter:
http://php.net/manual/en/session.examples.basic.php

like image 70
Eduard7 Avatar answered Nov 06 '22 02:11

Eduard7