htacess cũng là 1 cách nhưng nếu người quản trị ko biết code thì cũng hơi vất vả
.Bác nên viết code để ban IP,muốn ban IP nào vào administrator nhập IP cần ban.
Bác tham khảo thử nhé:
<?php
/************************************************** ****************************
--
-- Table structure for table `blocked_ips`
--
CREATE TABLE IF NOT EXISTS `blocked_ips` (
`ip` varchar(39) COLLATE utf8_bin NOT NULL DEFAULT '0.0.0.0',
PRIMARY KEY (`ip`)
) ENGINE=InnoDB DEFAULT CHARSET=utf8 COLLATE=utf8_bin;
/************************************************** ****************************/
$dbhost = 'localhost'; // hostname of the database server
$dbuser = 'user'; // database username
$dbpass = 'pass'; // database password
$dbname = 'database'; // name of the database to use
$admin_mail = 'admin@localhost'; // admin's email address
/************************************************** ****************************
get_ip() - Attempts to retrieve the most accurate IP possible from user.
/************************************************** ****************************/
function get_ip()
{
if(isset($_SERVER['X_FORWARDED_FOR']))
{
if(strpos($_SERVER['X_FORWARDED_FOR'], ',') === false)
{
return $_SERVER['X_FORWARDED_FOR'];
}
return trim(reset(explode(',', $_SERVER['X_FORWARDED_FOR'])));
}
return $_SERVER['REMOTE_ADDR'];
}
$ip = get_ip();
// connect to the database
$con = mysql_connect($dbhost, $dbuser, $dbpass) or die(mysql_error());
mysql_select_db($dbname) or die(mysql_error);
// build query
$sql = mysql_query("SELECT * FROM blocked_ips WHERE ip='$ip' LIMIT 1");
$result = mysql_num_rows($sql);
if ( $result == "1" )
{
header("HTTP/1.1 403 Forbidden");
echo '<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html>
<head>
<meta http-equiv="Content-type" content="text/html; charset=utf-8" />
<title>ERROR: 403 Forbidden - You have been banned!</title>
<style type="text/css">
</style>
</head>
<body>
<h1>ERROR: 403 FORBIDDEN</h1>
<p>
It appears that your IP ( '.$ip.' ) has been banned from accessing
this sites content. If you feel that this banning is in error, feel
free to contact the sites administrator to have it removed.
</p>
<p>Admin Contact: <a href="MAILTO:'.$admin_mail.'">'.$admin_mail.'</a></p>
</body>
</html>
';
die();
}
mysql_close($con);
// clean up variables
unset($ip,$sql,$query,$result,$con,$dbhost,$dbuser ,$dbpass,$dbpass);
/* end of file */