Detailed explanation of how to restrict access to IP whitelist in PHP-PHP Tutorial-php.cn

Detailed explanation of how to restrict access to IP whitelist in PHP

藏色散人

Release： 2023-04-08 09:32:02

forward

3456 people have browsed it

How does PHP restrict access to the IP whitelist?

1. Upload the code

config.php

    //ip白名单配置
        &#39;ipWlist&#39;=>[
            &#39;ifFilter&#39;=>true,   //是否开启白名单功能
            &#39;wlist&#39;=>[
                &#39;10.0.0.19&#39;,
            ],
            &#39;warea1&#39;=>&#39;10.8.0.0/16&#39;,     //白名单网段1
            &#39;warea2&#39;=>&#39;10.12.0.0/16&#39;,     //白名单网段1
        ],

Copy after login

commonfunc.php

private function checkIp(){
        $user_IP = ($_SERVER["HTTP_VIA"]) ? $_SERVER["HTTP_X_FORWARDED_FOR"] : $_SERVER["REMOTE_ADDR"];
        $user_IP = ($user_IP) ? $user_IP : $_SERVER["REMOTE_ADDR"];
        $ipC=config(&#39;appconf.ipWlist&#39;);
        if(!$ipC[&#39;ifFilter&#39;]){
            return true;
        }
        if(in_array($user_IP, $ipC[&#39;wlist&#39;])){
            return true;
        }
        if( ! $this->ip_in_network($user_IP, $ipC[&#39;warea1&#39;])){
            if( ! $this->ip_in_network($user_IP, $ipC[&#39;warea2&#39;])){
                return false;
            }
        }
        return true;
    }
    private function  ip_in_network($ip, $network)
    {
        $ip = (double) (sprintf("%u", ip2long($ip)));
        $s = explode(&#39;/&#39;, $network);
        $network_start = (double) (sprintf("%u", ip2long($s[0])));
        $network_len = pow(2, 32 - $s[1]);
        $network_end = $network_start + $network_len - 1;
        if ($ip >= $network_start && $ip <= $network_end)
        {
            return true;
        }
        return false;
    }

Copy after login

2. Description

2.1 How to obtain IP

● $_SERVER["HTTP_VIA"] When there is a proxy server, it indicates the proxy server IP;

● $_SERVER["HTTP_X_FORWARDED_FOR"] obtains the client's real IP address through the proxy server;

● $_SERVER["REMOTE_ADDR"] The IP address of the user who is browsing the current page

Generally speaking, developers have a good understanding of the internal server architecture and can simply use REMOTE_ADDR, because REMOTE_ADDR cannot be forged and is more secure. The other two fields are not So reliable.

2.2 Some children's shoes do not use array config but define

It can be solved by json_encode, serialization, eval(), etc., as follows

define("IPFILTER",1);  
define(&#39;IPWLISTJSON&#39;,json_encode([&#39;127.0.0.1&#39;,]));
// 业务中
$wlist = json_decode(IPWLISTJSON,1);
define(&#39;IPWLIST&#39;,"return [&#39;127.0.0.1&#39;,];");
// 业务中
$wlist=eval(IPWLIST)
define(&#39;IPWLIST&#39;,serialize([&#39;127.0.0.1&#39;,]));
// 业务中
$wlist=unserialize(IPWLIST);

Copy after login

You can also use the explode form of string special separator, etc., but I won’t give examples one by one here.

For more related php knowledge, please visit php tutorial!

The above is the detailed content of Detailed explanation of how to restrict access to IP whitelist in PHP. For more information, please follow other related articles on the PHP Chinese website!