IP restrictions

**allbusiness** · 09-28-2004, 06:17 PM

Is there any way to control or restrict an IP address from viewing private contents. For example, I would like to set up two different home pages (but want to keep the URL the same) where IP (1) will see only Home Page (1) and IP (2) will only see Home Page (2).

Hope I'm clear on this ask.

Thanks,
Jerome

**vivekar** · 07:53 PM

PHP Code
-----------------
$thisIP = getenv("HTTP_CLIENT_IP");

$arrAllowedIPs = array("127.4.1.0","25.25.25.25");
$arrBannedIPs = array("127.0.0.1","127.0.0.2");

$isdenied = in_array($thisIP,$arrBannedIPs);

if($isdenied)
{
header("Location: notallowed.html " );
}
else
{
header("Location: homepage.html " );
}

Hope this helps.

**allbusiness** · 09-28-2004, 08:51 PM

Thanks a bunch! I will try this out tonight. One quick question, should this code go between <Head></Head> or anywhere in the body?

Thanks again!

JErome

**andrews_john** · 09-29-2004, 05:18 AM

hmm, may be i'm wrong , but couldn't it be set through .htaccess??

**ibbo** · 09-29-2004, 08:20 AM

Well you can control directory access simply with something like

<Limit GET>
order deny,allow
deny from all
allow from hostname 192.168.0.1
</Limit>

But to be realy funky you need some extra magik

Thus

1 RewriteEngine on
2 RewriteCond %{REMOTE_ADDR} ^192.168.0.1
3 RewriteRule /* http://your-access-redirect-url.com/ [R,L]
4 RewriteCond %{HTTP_HOST} !^$
5 RewriteRule /* http://your-no-access-redirect-url.com/ [R,L]

If you have more than 1 ip who has access to your private directory then just repeat lines 2 & 3 chaning the ip in line 2.

1 RewriteEngine on

2 RewriteCond %{REMOTE_ADDR} ^192.168.0.1
3 RewriteRule /* http://your-access-redirect-url.com/ [R,L]

2 RewriteCond %{REMOTE_ADDR} ^192.168.0.2
3 RewriteRule /* http://your-access-redirect-url.com/ [R,L]

4 RewriteCond %{HTTP_HOST} !^$
5 RewriteRule /* http://your-no-access-redirect-url.com/ [R,L]

Of course you can ommit the absolute IP address and just insert the first 3 elements like 192.168.0. remember to leave a trailing ( . ) giving everyone on that subnet access to those pages.

The inner workings of apache can let you do many amazing things and the beauty of htaccess is you dont even need to be running your own server as they act like style sheets by overriding previous definitions with those just parsed. Just bang one into a directory and go.

Does any other web servers give such configuration options to end users?

Ibbo

**Kyrnt** · 09-29-2004, 09:30 AM

Regarding the code that vivekar posted, that would likely be your entire index.php file. It handles forwarding the user's browser to the proper page to be displayed based on the IP. There would be no HTML tags in the file at all. Are you familiar with PHP?

**vivekar** · 09-30-2004, 09:00 PM

.htaccess method is simple to implement.

PHP method is suited for advanced web programming tasks.
Using PHP method, you can dynamically display the content based on IP ( country, language preference etc.,)

Choose which ever suits you best.