Shaliza
12-24-2007, 12:29 PM
I'm trying to make it so that I'll be the only one allowed to access the admin section of my CMS. How do I make it so that if someone tries to access it, they can't?
I know this can be done by making it so that only my IP address will have access to the web address, but I'm lost on the code that I need.
the_pm
12-24-2007, 01:37 PM
I'm trying to make it so that I'll be the only one allowed to access the admin section of my CMS. How do I make it so that if someone tries to access it, they can't?
I know this can be done by making it so that only my IP address will have access to the web address, but I'm lost on the code that I need.Erm...doesn't your CMS come with password authentication? I would choose this over IP any day, since one day you might need to access your CMS from another location, or someone could find your IP (there are IP traces all over the place) and spoof it, if they REALLY wanted to gain access.
You could even do something as simple as htaccess/htpasswd to secure your CMS. Most control panels will allow you to get this up through a GUI, which makes life so easy!
azizny
12-24-2007, 03:51 PM
I am guessing you want to allow access to a certain IP plus username/password authentication, just like how it was done on Vdeck.
You will user the user's server variables for IP address, in PHP it's like:
http://www.phptricks.com/?L*20
Peace,
either use .htaccess allow/deny or php @$REMOTE_ADDR;
But i believe as others before me have posted that a username/password combination is really better
Shaliza
12-25-2007, 09:21 AM
Yes, it comes with a username/password authentication, but that didn't cut it. I don't think that one should use username/password combo as it would most likely make the hacker want to dig deeper.
I used .htaccess allow/deny yesterday along with extra protection & it works. I would never access this from another computer, especially a public one because that's just possibly inviting trouble. And even if I had a laptop, I found that it's easy to allow multiple IP's using .htaccess.