Validating IP address of person trying to login

An additional level of security on your administration is to set a list of valid IP addresses that are allowed to login to your administration. Anyone that tries to access the login page from an IP address that isn’t in the list will be diverted away from the page.

 

Note: The IP addresses can be a full IP address or a partial IP address.

 

To add a list of valid IP addresses, you need to edit your admin login page. Following our other recommendations, shopadmin.asp should be renamed. In this case, you must edit the real filename and not shopadmin.asp as in the examples below.

 

Const adminips

This is a comma-delimited list of IP addresses that should be allowed to login to admin system.

const adminemailIpcheck

Setting this to Yes tells VPCART that you want to receive an email notification if an attempt is made to access the admin page by an invalid IP address.

 

Example 1

If your IP address is 288.66.77.999, you can specify:

 

const adminips="288"

 

This will allow anyone with an IP starting with 288 to try to login.

 

Example  2

 

const adminips="288.66"

 

This will allow anyone with an IP starting with 288.66 to try to login.

 

Example 3

Multiple addresses can be used.

 

const adminips="288,127.0.0.1,299.66" 

 

This will allow anyone with an IP address starting with 288 or 127.0.0.1 or 299.66 to login.