Steve Harries
Elgg Technical Support
Get support from other Elgg users
Plugin Development
Talking about how to write plugins
Steve Harries replied on the discussion topic Restrict Access within a domain- Steve Harries replied on the discussion topic Restrict Access within a domain
- Steve Harries added a new discussion topic Restrict Access within a domain in the group Elgg Technical Support
Cheers @Dries looks like the solution I will need, .htaccess files are a foreign language to me so will have to do some serious reading. I have the Elgg in a sub folder on my server (which I would like to act as an intranet at that level) and .htaccess goes at root, could you advise how it might look for /myelggfolder/
Below is the .htaccess suggested from Stackoverflow
RewriteCond %{HTTP_REFERER} . RewriteCond %{HTTP_REFERER} !yourdomain\.com [NC] RewriteCond %{HTTP_REFERER} !alloweddomain\.com [NC] RewriteRule .? - [F]I shall continue reading.
Could this be relevant from http://stackoverflow.com/questions/20811492/htaccess-running-only-script
Options -Indexes RewriteEngine On RewriteCond %{REQUEST_URI} !^/myElggFolder/?$ RewriteCond %{HTTP_REFERER}!yourdomain\.com [NC] RewriteCond %{HTTP_REFERER} !alloweddomain\.com [NC] RewriteRule .? - [F]If I understand this:
- User requests subfolder (I presume this is by address typing or by links and bookmarks?)
- If not from yourdomain.com
- Or not from alloweddomain.com
- Throw a 403 forbidden message
Am I on the right track?
I presume you can, or may need to, add the loopback address somewhere?
Options -Indexes
RewriteEngine On
RewriteCond %{REQUEST_URI} !^/myElggFolder/?$
RewriteCond %{HTTP_REFERER} !yourdomain\.com [NC]
RewriteCond %{HTTP_REFERER} !(localhost | loopback | 127\.0\.0\.1) [NC]
RewriteCond %{HTTP_REFERER} !alloweddomain\.com [NC]
RewriteRule .? - [F]The line in bold is an uneducated guess as to how it may look...
I have also posted on StackOverflow
http://stackoverflow.com/questions/27439797/elgg-sub-folder-intranet-only-access
Was any headway made on this? I don't need this exact feature, just curious.
- Steve Harries joined the group Elgg Technical Support
- Steve Harries replied on the discussion topic User registration upload
- Steve Harries replied on the discussion topic User registration upload
- Steve Harries replied on the discussion topic User registration upload
Good question I guess, in case 1.9 becomes corrupt if that can happen? i could not find any discussion on it working or not
Apologies, this is the plugin I have now tried https://community.elgg.org/plugins/852868 but doesn't seem to work in 1.9?
Any suggestion of alternatives or why this doesn't work.
UPDATE - I tried it again and it has worked.