|
From: Joseph R. <rya...@os...> - 2002-02-20 14:55:37
|
Thats a really great idea; however, not much good if the admin doesn't know the offending ip address :) Should there also be an option to record ip addresses on each post? ----- Original Message ----- From: "Wizard" <wi...@ne...> To: <nms...@li...> Sent: Wednesday, February 20, 2002 7:38 AM Subject: [Nms-cgi-devel] Just a suggestion... > Back around 1997, I had made some security modifications to Matt > Wright's WWWBoard for a friend of mine who was having some problems with it. > In addition to restricting content-length, limiting re-posting, and a banner > ad addition, I added a section which allowed for IP filtering. I finally got > a chance to dig around, and came-up with the attached code. > It works through a deny/allow mechanism, which first denies the domain > specified by the IP address, and then allowing specific IPs within that > address range. For example, "10.10.32.*" in the $deny string would deny > postings by any users within that domain, however if "10.10.32.7" were in > the $allow string, then that particular IP could still post. The IPs of all > users is posted as an HTML comment to each post. This IS somewhat of an > advanced option for a lot of WWWBoard users and may be a problem with the > un-initiated admin, however. Any thoughts? > Let me know, > Grant M. > |