Whiskey Tango?

What Len Morgan wrote was:
> This is all a moot point now since I have just been informed by
> Heather that the only way the on-rev server can be set up to do
> this is if you give them all of the IP addresses that people are
> going to connect from and they will allow those IP addresses to
> connect.

Unless I missed something earlier in this thread, it seems he's writing about blocking access based on IPs, and all Heather did was remind him of what Pierre wrote here, that given the majority of folks who use dynamic IPs that isn't practical.


FWIW, On-Rev does indeed provide unlimited databases:

   MySQL 5.0.67 Databases: Unlimited
   PostgreSQL Databases: Unlimited
<http://www.on-rev.com/hosting/features-chart/>


Back to the original topic, granting/restricting access based on IPs is risky and prone to error if any of your users have dynamic IPs, for the reasons Pierre noted earlier this morning.

IP-based restrictions can be somewhat useful for some institutional customers where fixed IP ranges can be known to belong to the customer. I use it myself on a subscription site I manage for a client, but not as an alternative to login authentication but merely as an extra restriction on top of the login requirement; I would never rely on IP address alone.

With individual users on dynamic IPs, the risk is that the IP they're using right now may be reassigned to someone else later, providing unauthorized access to unknowable individuals. Granting access by range only exacerbates the risk.

So while it's sometimes useful, IP-based access doesn't appear to be a practical option for Mr. Morgan, leaving him to consider more conventional options like a simple login as most sites require for authenticated access.


Andrew, you can hopefully breathe easier now. Relax and enjoy your unlimited databases.

--
 Richard Gaskin
 Fourth World
 LiveCode training and consulting: http://www.fourthworld.com
 Webzine for LiveCode developers: http://www.LiveCodeJournal.com
 LiveCode Journal blog: http://LiveCodejournal.com/blog.irv
_______________________________________________
use-revolution mailing list
use-revolution@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-revolution

Reply via email to