![]() |
Need Programming Help - Members Area Plugin
Ok ... Been at this for hours with no luck searching forums google or anything so here it goes. I am trying to figure out how to limit access to a page to traffic only coming from certain domains for a members area plugin we are working on. Basically you can't typein the domain and get anything, has to be linked from certain approved members areas or domains and what not. I have tapped everything I can think of and coming up dry. Any help greatly appreciated.
|
You can do it with htaccess
|
Code:
$ref = $_SERVER['HTTP_REFERER']; |
Don't do it with referrer, it's way too amateurish... It may have been good enough 10 years ago, but now a days any idiot can hardcode referer='yoursite.com' into firefox and browse your plugin for free... people even collect and post links to poorly protected plugins like that on surfer forums... you will piss away ton of bandwidth this way...
|
Quote:
|
The reason you've had trouble finding it is is that there is no easy way to
do it with a few lines of .htaccess of whatever and have any level of security. Soee old plugin providers did that, but those are the ones posted all over the hacker boards and password sites and all, and who are also found in the members' area of some legitimate looking sites although the webmaster isn't paying the fee. We can set you up with a secure system based on Strongbox technology, though. |
Quote:
|
Quote:
|
There's the referrer method mention but it has problems like mentioned above. You would have to do something where the plugin generates some type of authentication code and then that code is valid for a certain time period. You could even hash that code and combine it with their IP address so that code is tied to a given IP address only.
|
All times are GMT -7. The time now is 09:40 AM. |
Powered by vBulletin® Version 3.8.8
Copyright ©2000 - 2025, vBulletin Solutions, Inc.
©2000-, AI Media Network Inc123