Restrict access to functionality for user by IP address

烈酒焚心 提交于 2021-02-05 00:59:15

问题


I have a website that allows a functionality for any user but each user is only allowed to use it a fixed amount of times.

Allow me to go into some more detail, our "anonymous/guest" user is allowed to search on the database for entries only 3 times per 24 hours. Is there a way I can use the IP to track the users attempts at this, restricting them after 3 attempts and then get it to expire after 24 hours?

The website is built in PHP but whatever language serves this functionality, I am open to it.

EDIT:

This idea comes from a client, they have a list of "stockists" stocking their products and they want to make this information available to users of the website. However, he doesn't want competitors taking advantage of his system and "undercutting" him on his stockists. Hence the restriction. If you can suggest a better way to achieve the same then that'd be amazing

Cheers, Dan


回答1:


You have to use the $_SERVER global variable, like this:

if ($_SERVER['REMOTE_ADDR'] == '127.0.0.1') {
  // restrict
}

But You have to consider kojiro's note: it's not a good idea to restrict by IP address.

Edit: to be constructive.

If you want to do it on low level, you can use cookies. These variables stored in the user's browser, if the user clear the cookies locally, he/she can override your restriction.
http://www.php.net/manual/en/function.setcookie.php

The better solution is to use sessions for this filter:
http://php.net/manual/en/session.examples.basic.php



来源:https://stackoverflow.com/questions/5140997/restrict-access-to-functionality-for-user-by-ip-address

标签
易学教程内所有资源均来自网络或用户发布的内容,如有违反法律规定的内容欢迎反馈
该文章没有解决你所遇到的问题?点击提问,说说你的问题,让更多的人一起探讨吧!