Loading...
 
Features / Usability

Features / Usability


Re: How to block external acess?

posts: 214

To block all Tiki log in attempts from IP addresses ending in .1, you can add the code below after the "RewriteEngine On" statement in the .htaccess file (or _htaccess file, if .htaccess is a symbolic link).

Copy to clipboard
RewriteCond %{REMOTE_HOST} ^.*\..*\..*\.1$ RewriteCond %{REQUEST_URI} "tiki-login_scr.php.*" RewriteRule ^.*$ tiki-information.php?msg=Log-in-is-resticted [NS,L]


That says if the IP address of the remote host ends in .1, and they are trying to access tiki-login_scr.php, then redirect them to the error message.
It checks for things after the tiki-login_scr.php because tiki-login_scr.php?user=admin can be used to prefill in the user name.

If you have any local network IP addresses ending in .1, this will block them too.

Tom

There are no comments at this time.