Jump to content

Restrict ACP access

Featured Replies

Posted

Since our forums get hacked on a regular basis, it would be really great to see another layer of protection implemented in the next version of IPB. If one could set a range of IP addresses that can access the Admin Control Panel, a hacker's job would become much harder. :) I believe such a feature is really needed.

You can already do this using a fairly simple .htaccess file in your forums directory:

<Files admin.php>
order deny,allow
deny from all
allow from 123.456.789.10
allow from 123.456.789.11
</Files>

There is also a modification at Invisionize (IZE) under 2.1.x mods that does 'this'.

You can already do this using a fairly simple .htaccess file in your forums directory:



<Files admin.php>
order deny,allow
deny from all
allow from 123.456.789.10
allow from 123.456.789.11
</Files>


Can I use the * wildcard while defining the allowed addresses?

If you use:

<Files admin.php>
order deny,allow
deny from all
allow from 123.456
</Files>

It'll allow 123.456.*.* You can also do it using a hostname if you wish:

<Files admin.php>
order deny,allow
deny from all
allow from blueyonder.co.uk
</Files>



Will allow anyone using Blueyonder as their ISP access.

Won't the .htaccess file slow down access to my board?

Using the hostname lookup probably would a bit - but it'd only be when accessing your Admin CP - not the public facing side of the board.

  • 2 weeks later...

This is a good suggestion, I think there should be an option to do that!

Anything to keep the hackers out of your forum.....whatever means necessary beside killing your own forum..

Archived

This topic is now archived and is closed to further replies.

Recently Browsing 0

  • No registered users viewing this page.