dns-name instead of ip – again
-
Hello,
I think some big missunderstanding happened in https://www.ads-software.com/support/topic/dns-name-instead-of-ip/.
The request was not to authenticate using the website’s hostname ($_SERVER[‘HTTP_HOST’]) but to lookup a allowed (e.g. dyn dns) hostname specified in the configuration and to match it with the client’s / source ip address. Not sure why this would be insecure (ignoring more sophisticated attacks like dns poisoning). It might be -without caching- a performance problem without caching for sites with significant traffic, though.
If you don’t want to implement this, would there be a chance to make the allowed IPs changable via WP-CLI? Then I could run a cronjob that basically achieves the same goal.
Thanks for considering!
Tobias
- The topic ‘dns-name instead of ip – again’ is closed to new replies.