hi, im triying this awesome class, but when i use a xml to configure the ip block or allow, specify when using the allow ip do not work propertly send that the ip i allow is blocked, and the ip is allow, so it just work fine without passing a xml file with the config.
so did you got any idea here is the way i implement but not work
//here is the code, and the include is well implement but do not work like this
//here X.X.X.X is changed by my ip address i got a ip static so no problem of being dynamic
include 'includes/firewall.class.php';
try{
$firewall = new Firewall('includes/FirewallSet.xml');
$firewall->run();
}
catch(Exception $e){
die("Acceso Restringido. Contacte al WebMaster UAEH si existe un error");
}
///////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////
this is my FirewallSet.xml
///////////////////////////////////////////////////////////////
<firewall>
<!-- IP: IP block / allow list, remember that net mask can also be provided to block subnets example: 23.23.0.0/255.255.0.0, this will block the whole 23.23.X net. -->
<IP>
<!-- block: These ips will get blocked. -->
<!--<block>
<item>23.23.23.23</item>
<item>23.23.23.21</item>
</block> -->
<!-- allow: When using allow block element is not needed because you only allow these elements -->
<allow>
<item>X.X.X.X</item>
</allow>
</IP>
<!-- userinput: User input settings, to remove sql injections and block userinput of any kind.
Additional settings is separated by the "|" symbol.
The following Constants can be selected:
Firewall::POST
Firewall::GET
Firewall::FILES
Firewall::COOKIE
Firewall::SERVER
Firewall::SESSION
-->
<userinput>
<!-- preventInput: Prevents all variables and unsets any data posted by users including post, get, cookie and all other variables that users can post data in. Leave types arguement empty if you want to filter it all.
This setting is only useful at static php webpages.
-->
<preventInput types="Firewall::POST|Firewall::GET">false</preventInput>
<!-- inputProtection: Removes all kind of html (XXS safe) and removes sql injection from any kind of userinput including get,post, cookie, session variables. Leave types arguement empty if you want to filter it all.-->
<inputProtection types="Firewall::POST|Firewall::GET|Firewall::FILES|Firewall::SESSION|Firewall::COOKIE|Firewall::SERVER">false</inputProtection>
</userinput>
</firewall>
///////////////////////////////////////////////////////////////
///////////////////////////////////////////////////////////////
//here is the code, WITHOUT the XML and work FINE
//here X.X.X.X is changed by my ip address i got a ip static so no problem of being dynamic
include 'includes/firewall.class.php';
try{
$firewall = new Firewall();
$firewall->allowIP('X.X.X.X');
$firewall->run();
}
catch(Exception $e){
die("Acceso Restringido. Contacte al WebMaster UAEH si existe un error");
}
//////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////
Please help to fix this
Alberto - 2010-08-06 21:11:57
