authorization idea (good or bad?)
| From: | John Guynn | Date: | Wed, 04 Oct 2000 13:11:03 +0000 |
| Subject: | authorization idea (good or bad?) | ||
| Groups: | php.db | ||
| Request: | Send a blank email to php-db+get-3291@lists.php.net to get a copy of this message | ||
I'm trying to decide if this is a good idea or not. If I have a table with
usernames, passwords, and IP addresses I can look at the user's ip address
with $REMOTE_ADDR, see if that matches what's in the database and allow
access to the page and interact with the database (the page I'm wanting to
protect is the page that I use to edit the contents of tables) but if the IP
address does not match any records ask for a username and password, recheck
with the "security" table and allow access if it matches an entry.
Of course this is assuming I know the IP address(es) of the computer(s) that
would be accessing this database most often.
Good idea or bad idea?
John Guynn