Restricetd access to a web-application with htaccess or php

Per Lasse Baasch — Fri, 03 Jul 2009 19:08:17 +0000

If you building a simple web-application and you are not really sure, ow secure are the authentication and or the rest of the application you should think about to limit the access to the application.
Furthermore, may your application should be available only for testing purpose of several customers the following could help you:

First way… using a .htaccess which controls the access using a apache web server.
This is a very fast sollution BUT you CAN’T use hostnames and or full qualified dns names like skycube.net or yourname.dyndns.org

<Limit GET HEAD POST>
order deny,allow
allow from 62.75.185.219
allow from 127.0.1.1
allow from 127.0.0.1
deny from all
Limit>

The second way… which I prefer, using a php code snippet. This allows you to use hostnames and full qualified domain names. Definitely you can write it in less than the lines I used below for the code, but in of understanding what the code does, it’s better


/**
 * ACL array
 */
$valid_hosts = array();
$valid_hosts[] = 'localhost';
$valid_hosts[] = '127.0.0.1';
$valid_hosts[] = '127.0.1.1';
$valid_hosts[] = 'yourname.dyndns.org';
$valid_hosts[] = 'skycube.net';
 
for($i=0;$i<sizeof($valid_hosts);$i++){
  $valid_ip = gethostbyname($valid_hosts[$i]);
  if($valid_ip == $_SERVER['REMOTE_ADDR']){
    $valid_state = 'valid';
    break;
  }
  else{
    $valid_state = 'invalid';
  }
}
if($valid_state != 'valid')
  header("Location: http://www.skycube.net");
?>

Usefully phpMyAdmin config vars

Per Lasse Baasch — Tue, 16 Jun 2009 19:24:32 +0000

While working with large databases, phpMyAdmin is in serveral cases not the perfect application to handle changes and or administrate the databases but may the only one you are allowed to use.

In this order there are two default configuration the following to configuration vars will help you to work better and faster.

Show all rows without a limit:

$cfg['ShowAll'] = true;

Show full update statements:

$cfg['MaxCharactersInDisplayedSQL'] = 2147483647;

In order to the default value, updates with more than 1000 chars will be replaced with […].

Just place these in the config.inc.php e.g. /var/www/htdocs/phpmyadmin/config.inc.php

SKYCUBE.net » php

Restricetd access to a web-application with htaccess or php

Usefully phpMyAdmin config vars