| Re: How do I prevent different IPs loggin in to one account |
| by Mamba on 2010/7/26 0:22:03 The banks do it in a following way: - the first time you login, they save some unique identifier related to your computer and OS. - if you log in from another computer (or reinstall your Windows), they will ask you some security questions that you've provided answer to before (e.g. name of your best friends from high-school or name of your first pet) - once they check out, you'll get access, and they save the new ID - I am sure that if you go back and forth, it will raise a red flag and they will investigate it. Maybe somebody could design something similar for XOOPS - it would probably solve your issue. |
| Re: How do I prevent different IPs loggin in to one account |
| by BeautyBrains on 2010/7/25 23:26:15 If IP blocking isn't the way to go, then at minimum, for example... Right now I'm logged in to xoops so technically, no one should be able to log in with my details WHILE I'm still logged in here; the system should automatically block the second log in attempt and ban the user. So I am understanding that this is what Protector does? If not, what does? You hit it on the nail Katz! I ain't got time to be watching IP addresses; I need an automated response unit to terminate and destroy the offenders LOL. Right now I have the voluntary donation box and I am seriously thinking of making it a paid membership and so need to implement certain security features that I see on other sites. |
| Re: How do I prevent different IPs loggin in to one account |
| by red_Slider on 2010/7/23 23:14:56 YHYM!!!!! PS someone well done site! |
| Re: How do I prevent different IPs loggin in to one account |
| by Catzwolf on 2010/7/23 20:03:57 I think all of you have gone right off in the wrong direction from what she is asking, she wants to know how to prevent the SAME user from a different IP from logging into the site. This way, a user who has paid membership cannot just hand over their login details to someone else and then expect still to login to the system. Sure protector will ban an IP address and stop them from logging into the system, but she first needs to know the IP address and secondly, she really doesn't want to sit there examining everyone who logs in to see what IP address they are using. Now while this can be done, there are issues that need to be looked at first. Not every IP address is static, for example, DSL connections IP addresses are rotated frequently and this is where the problem will arise. So, preventing a user from logging in with a different IP address, may affect legitimate users in reality. |
| Re: How do I prevent different IPs loggin in to one account |
| by red_Slider on 2010/7/23 19:39:47 Welcome I see that I created a little confusion. You asked, so I sent to the source - the module creator site. Protector is like a firewall. Prevents many attacks on your the portal. It's really a fantastic tool. GIJOE was I gave you, you can read more about the methods of hacking (etc.) - the sum of all the risks to which your site is exposed. As to your questions about the different methods of attack will send to google. DoS - what is dos? - Bad Crawlers (like bots collecting e-mails...) - this I get - OK - SQL Injection - ??? - XSS (not all though) - ??? - System globals pollution - ??? - almost all the rest - Session hi-jacking - I think this is what I need but I really don't know what that is. All I know about session is that sometimes my site logs me out and gives me a session error. Or if I take too long to create a post I will get a session error. - yes - but that hijack your session, and gives 4e admin permissions on your site There are many pages about hacking - I recommend to read some basic articles on temad most popular methods - this will allow you to understand the attack and operation of the Protector. Quote: RedSlider is this protector diff from the version that comes with 2.4.4? Should I be using this one instead or should I try what MadDan suggested. You ask whether to use the version of the package if the version of the GIJOE. The answer is simple - when configured with a module, then use this bundle. Quote: You guys will have to tell me exactly what file to edit and exactly where in the file to put the code. And now the answer to your question. Quote: How do I prevent different IPs loggin in to one account 1. I understand that you know the IP number that you want to block. 2. You have two options: a) go into: yoursite.com/http://smartklub.pl/modules/system/admin.php?fct=preferences&op=show&confcat_id=1 look into last filed. Here U can put IP adress, that U want to block b) go into: yoursite.com/modules/protector/admin/index.php look onto first field - and do the same I hope this time I helped ;) |
Search
Recent Posts
Who's Online
Donat-O-Meter
| Stats | |
| Goal: | $15.00 |
| Due Date: | Jul 31 |
| Gross Amount: | $0.00 |
| Net Balance: | $0.00 |
| Left to go: | $15.00 |
|
|