IP Blocker?

Ben

Can anyone write an extension that will look at a list of IP's and stop all logins from that IP?
I don't want it to just stop them, It would be fantastic if it could display a message on the login page whenever it is accessed from one of the denied IP. It needs to be quite obvious that the IP is blocked before they actually try and sign-in.

lech

here's a start... I don't condone this method, but it works if needed

/* grab the IP */ $ip = $_SERVER['REMOTE_ADDR'];

/* block only the computer on 192.168.1.104 */
if ($ip == '192.168.1.104') {
	echo '<h1>B4NZ0R!</h1>';
	exit();
}

/* Blocks out the entire IP range for 192.168.xxx.xxx */
if (ereg ("(192).(168).([0-9]{1,3}).([0-9]{1,3})", $ip, $regs)) {
	/* Anyone on the range will receive this message */
	echo '<h1>B4NZ0R!</h1>';
	exit();
}

a stupidly simple method, but it works

Ben

ahh, fantastic. thankyou

Mark

The sad thing is that IP blocks are very easy to get around by proxy. Firefox even has extensions to easily accomplish this. If you are trying to block someone with even the smallest amount of web-knowledge, you may just piss them off by implementing an IP block, and they'll come at you even stronger than before. Your best bet is to just lock down the forum with administrative approval of new applicants (like I do on here) and use your ban feature when necessary.

Ben

stupid question, but how would i go about making that into an extension, to run at the top of every page?

lech

I agree with mark though, getting around this wouldn't be much of an issue especialy when proxies are involved. Spoofing is still pretty easy and like mark said, ben, you're not going to get far by blocking their IP especially if they're on a dynamic connection. However, if you REALLy want to make this into an extension, you can R.T.F.M. ? and figure things out. I'm still strugling with some things.

Ben

It doesnt have to be proof against IT-savvy web addicts, just your average student.
_{...How odd, two v's look just like a w.}

lech

Well, if it's on a lan box, blocking it would be much much easier, however, on a wider net connection, you'll soon learn it's not worth the effort. Students are fairly smart, trust me.

nathan

also, if it is a student, they could be on a shared connection, and you might actauly block a school or something. You never know. (Well you do, but you would have to look first. You know what I mean)

Ben

I'm trying to block a school. We're on a shared connection and everything goes through this one school server. And being a student myself, most wouldn't know how to go about bypasssing it.

nathan

if you use one of those phpProxy scripts, you will get around it in no time.