Invision Community 4: SEO, prepare for v5 and dormant account notifications Matt November 11, 2024Nov 11
Posted July 23, 200618 yr Since our forums get hacked on a regular basis, it would be really great to see another layer of protection implemented in the next version of IPB. If one could set a range of IP addresses that can access the Admin Control Panel, a hacker's job would become much harder. :) I believe such a feature is really needed.
July 23, 200618 yr You can already do this using a fairly simple .htaccess file in your forums directory:<Files admin.php> order deny,allow deny from all allow from 123.456.789.10 allow from 123.456.789.11 </Files>
July 23, 200618 yr There is also a modification at Invisionize (IZE) under 2.1.x mods that does 'this'.
July 24, 200618 yr You can already do this using a fairly simple .htaccess file in your forums directory:<Files admin.php> order deny,allow deny from all allow from 123.456.789.10 allow from 123.456.789.11 </Files>Can I use the * wildcard while defining the allowed addresses?
July 24, 200618 yr If you use:<Files admin.php> order deny,allow deny from all allow from 123.456 </Files> It'll allow 123.456.*.* You can also do it using a hostname if you wish: <Files admin.php> order deny,allow deny from all allow from blueyonder.co.uk </Files>Will allow anyone using Blueyonder as their ISP access.
July 24, 200618 yr Using the hostname lookup probably would a bit - but it'd only be when accessing your Admin CP - not the public facing side of the board.
August 6, 200618 yr This is a good suggestion, I think there should be an option to do that!Anything to keep the hackers out of your forum.....whatever means necessary beside killing your own forum..
Archived
This topic is now archived and is closed to further replies.