|
From: Wizard <wi...@ne...> - 2002-02-20 12:40:54
|
Back around 1997, I had made some security modifications to Matt
Wright's WWWBoard for a friend of mine who was having some problems with it.
In addition to restricting content-length, limiting re-posting, and a banner
ad addition, I added a section which allowed for IP filtering. I finally got
a chance to dig around, and came-up with the attached code.
It works through a deny/allow mechanism, which first denies the domain
specified by the IP address, and then allowing specific IPs within that
address range. For example, "10.10.32.*" in the $deny string would deny
postings by any users within that domain, however if "10.10.32.7" were in
the $allow string, then that particular IP could still post. The IPs of all
users is posted as an HTML comment to each post. This IS somewhat of an
advanced option for a lot of WWWBoard users and may be a problem with the
un-initiated admin, however. Any thoughts?
Let me know,
Grant M.
|