[ Tutorial ] How to Secure you're staff's account's [ Solution ]

Hey Ragezone,

I don't know if this Tutorial has been released yet.

Today I want to show you how to secure your staff's account's


I - SQL

1) Create a Table that would keep the IP's.

We start creating a table that would keep the IP's, incase if someone else got acces on the staff account with a different IP he would not have acces on the housekeeping, This table Would have 2 collums: `ip`, `pseudo`. than you will see that each account have the login IP. This is the SQL to add in you're database :


CREATE TABLE IF NOT EXISTS `ip_staff` ( `ip` varchar(255) NOT NULL, `pseudo` varchar(255) NOT NULL DEFAULT 'AUCUN') ENGINE=MyISAM DEFAULT CHARSET=latin1;

- - - - - - - - - - - - - - - - - - - - - - - - - - -

2) Complete the table.

To complete the table, Click on "Insert" Than in IP, enter the IP off the staff, In psuedo enter the staff username, than save it


II - Redirection (on PHP)

1) We create our mini security system.

We are now going to make the PHP code that would search the computer that try to login with the staff account, and will compare the IP with the IP given in the Database (You will have to make a page a redirection page, we will call it,
"staff_protect.php".


Put the following code in to the CMS main folder : (in my case its global.php)




<?php/** système anti intrusion par OvZ (peut être modifié/supprimé) **/if($user['rank'] >= 4) {$lancer[1] = mysql_query("SELECT ip,pseudo FROM ip_staff WHERE ip = '".$_SERVER['REMOTE_ADDR']."'");$donnees[1] = mysql_fetch_array($lancer[1]);if($donnees[1][pseudo] != $user['username']) {header("location:./staff_protect.php");die();}} ?>
Your staffs will be now secured ( you will never know if your mods give there password to someone to buy some furni's in the staff catalogue )

Credits:

Forum : Ibuild
User : OVZCMS
ME : for the translation & the share :w00t:

Crowey

Stupid when your staff have dynamic ips.

I've to agree with Spheral, i had the same system as you. But 50% of my staff members had a dynamic ip.
However, what you could do is create a cookie with some security information in it, and then check it with the database.

This doesn't seem to work for me.

released, stupid ? ignore this thread. K thanks

This won't work with dynamic ips.
Just add a pin system, make the, choose a pin when they become staff, simples.

Did u guys read?

Credits:

Forum : Ibuild
User : OVZCMS
ME : for the translation & the share :w00t:

Crowey