Restrict login / Do not allow multiple login per user

[lx]

Hi all,
I'm successfully using the great script but wonder how I can restrict it to restrict user login?

I don't want to allow users from different workstations to access with the same user/pass, since the system behind the login is quite complex and rather useful for one dedicated login.

Thanks.

Cheers. 

[zubrag]

Do you want to tie login to IP? If yes, then

before this line
$LOGIN_INFORMATION = array(

insert this map of user IPs (update list to match your user ips)
$IPS = array(
  'user1' => '123.456.789.012',
  'user2' => '45.234.245.134'
);
function getUserIP() {
    if (isset($_SERVER['HTTP_X_FORWARD_FOR']) && $_SERVER['HTTP_X_FORWARD_FOR']) {
        return $_SERVER['HTTP_X_FORWARD_FOR'];
    } else {
        return $_SERVER['REMOTE_ADDR'];
    }
}


also find this code
|| (USE_USERNAME && ( !array_key_exists($login, $LOGIN_INFORMATION) || $LOGIN_INFORMATION[$login] != $pass ) )

and insert this code after it, or place this code into next line
|| $IPS[$login] !== getUserIP()


also find this code
if ($_COOKIE['verify'] == md5($lp)) {

and replace with this code
if (($_COOKIE['verify'] == md5($lp)) && ($IPS[$key] == getUserIP())) {

script will check user ip in addition to login/password. If user is under proxy - it will check proxy ip.

[lx]

Hi zubrag,

That's kind of what I was looking for. Thanks for this, I'll have a go with it and try to make it work for the site.
Actuall I need to find a way how to grab a local IP because I need restrictions for that and also global IPs e.g. from ISP.

LX