Verify Ip adress Verify Ip adress
 

News:

cpg1.5.48 Security release - upgrade mandatory!
The Coppermine development team is releasing a security update for Coppermine in order to counter a recently discovered vulnerability. It is important that all users who run version cpg1.5.46 or older update to this latest version as soon as possible.
[more]

Main Menu

Verify Ip adress

Started by tortech, February 25, 2012, 07:12:54 PM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

tortech

Is new user has saved in database: login, password and IP adress.
Is it possible to verify adress durring logging for each user.

Αndré

What exactly do you mean with "verify"? Do you want to compare the current IP address with the IP stored in the database and reject the login if it doesn't match?

tortech

I would like to offer my gallery to two kinds of clients. One - individual person, another: school, university etc.
In second case it is necessary to compare: login, password and IP address. It is not necessary to reject login from database if IP address does not match. In this situation client has never got connection to database. Coppermine Programme must save IP address during the client's first logging.
It is very useful to have two versions of Coppermine Gallery: normal and stronger (stronger means stronger conditions during logging).

Αndré

Sorry, but you contradict yourself, but it's maybe just a matter of terminology:
Quote from: tortech on March 03, 2012, 09:54:13 AM
it is necessary to compare: login, password and IP address
Quote from: tortech on March 03, 2012, 09:54:13 AM
It is not necessary to reject login from database if IP address does not match

"Login" is for me the process of "log in to the system" (means, entering username and password of an already existing account).
"Register" is for me the process of creating a new account.

So what I understand is that you want to compare during login: username AND password AND IP address.


Quote from: tortech on March 03, 2012, 09:54:13 AM
I would like to offer my gallery to two kinds of clients. One - individual person, another: school, university etc.
Do you want to offer the same gallery to those different kinds? If so, how do you determine if a person or school currently tries to login (and thus take the IP address into account)?

tortech

Quote from: Αndré on March 03, 2012, 11:03:17 AM
Sorry, but you contradict yourself, but it's maybe just a matter of terminology:
"Login" is for me the process of "log in to the system" (means, entering username and password of an already existing account).
"Register" is for me the process of creating a new account.

So what I understand is that you want to compare during login: username AND password AND IP address.

Do you want to offer the same gallery to those different kinds? If so, how do you determine if a person or school currently tries to login (and thus take the IP address into account)?

tortech


Than you for answer
Now I would like to offer my gallery to school, university etc.
I want to compare during login: username AND password AND IP address (or other information for example number of computer)
In first logging school has got: username AND password. In this moment program reads Ip address and save it into database.
In next loggings program must compare: username AND password AND IP address
Is this problem solved im Coppermine Gallery.



Quote from: Αndré on March 03, 2012, 11:03:17 AM
Sorry, but you contradict yourself, but it's maybe just a matter of terminology:
"Login" is for me the process of "log in to the system" (means, entering username and password of an already existing account).
"Register" is for me the process of creating a new account.

So what I understand is that you want to compare during login: username AND password AND IP address.

Do you want to offer the same gallery to those different kinds? If so, how do you determine if a person or school currently tries to login (and thus take the IP address into account)?

Αndré

Quote from: tortech on March 03, 2012, 06:09:07 PM
In first logging school has got: username AND password. In this moment program reads Ip address and save it into database.

IMHO it's better to read the IP address during registration, or do you have new registrations disabled and create the user accounts manually?

tortech

It is better to store cookies in Copermine database nad compare it durringo logging?


Quote from: Αndré on March 05, 2012, 02:33:48 PM
IMHO it's better to read the IP address during registration, or do you have new registrations disabled and create the user accounts manually?

Αndré

Do you need help or not? Why don't you just answer my question? How do your visitors get an account for your gallery? Do they register themselves in your gallery or do you (as admin) create the user account for your visitors?


Quote from: tortech on March 07, 2012, 07:55:30 AM
store cookies in Copermine database
FYI, cookies aren't stored at the server: http://en.wikipedia.org/wiki/HTTP_cookie

tortech


These two parameters: Ip adress and cookies are not so good to protect my database.
Now J give permission only fo 31 days for all users in my database. J (as admin) create manually the user accont for all visitors.
J' m looking for script in PHP. Script must change parameter Registered when time 31 days was end.
Every day J must run this script inside database My SQL.
May be someone knows how to solve this problem.


Quote from: Αndré on March 07, 2012, 10:06:17 AM
Do you need help or not? Why don't you just answer my question? How do your visitors get an account for your gallery? Do they register themselves in your gallery or do you (as admin) create the user account for your visitors?

FYI, cookies aren't stored at the server: http://en.wikipedia.org/wiki/HTTP_cookie

Αndré

Quote from: tortech on March 09, 2012, 04:41:42 PM
These two parameters: Ip adress and cookies are not so good to protect my database.
Sorry I don't understand what that should mean. Do you want to want to compare the IP address during login or not?


Quote from: tortech on March 09, 2012, 04:41:42 PM
Now J give permission only fo 31 days for all users in my database. J (as admin) create manually the user accont for all visitors.
J' m looking for script in PHP. Script must change parameter Registered when time 31 days was end.
Every day J must run this script inside database My SQL.
May be someone knows how to solve this problem.
Quote from: Joachim Müller on September 28, 2008, 10:28:42 AM
10. One question per thread
We have a strict "One question/issue per thread rule", which helps both supporters/moderators to keep track of open/closed issues as well as users who search the board or browse it, looking for answers to their question.

tortech

J changed my mind. J dont compare IP address during login.
Now it is important for me to allow user to view my gallery only for 31 days of first login.
What can J do?


Quote from: Αndré on March 12, 2012, 10:34:27 AM
Sorry I don't understand what that should mean. Do you want to want to compare the IP address during login or not?

Αndré

Please start a new thread for your new question.

tortech

In this thread J would ask about id session. Is this parameter stored in Copermine database?




Quote from: tortech on March 12, 2012, 12:22:55 PM
J changed my mind. J dont compare IP address during login.
Now it is important for me to allow user to view my gallery only for 31 days of first login.
What can J do?

Αndré

Quote from: tortech on March 15, 2012, 01:35:39 PM
In this thread J would ask about id session.
How is this related to the topic "verify IP adress"?

Quote from: Αndré on March 12, 2012, 01:24:16 PM
Please start a new thread for your new question.


Locking.