<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Restricted Site Access (WordPress Plugin)</title>
	<atom:link href="http://www.cmurrayconsulting.com/software/wordpress-restricted-site-access/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.cmurrayconsulting.com</link>
	<description>Web Development and Strategy Experts located in Providence, Rhode Island</description>
	<lastBuildDate>Sat, 20 Mar 2010 23:32:47 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Raden Payas</title>
		<link>http://www.cmurrayconsulting.com/software/wordpress-restricted-site-access/#comment-3805</link>
		<dc:creator>Raden Payas</dc:creator>
		<pubDate>Sun, 07 Mar 2010 09:28:11 +0000</pubDate>
		<guid isPermaLink="false">http://www.cmurrayconsulting.com/?page_id=699#comment-3805</guid>
		<description>Dear Admin,

This is seems to be a nice plugin and I have the following questions.

1. I want to alllow every user to login only from their own IP address, Is this possible? This is to avoid sharing of  login details.

2. If the number 1 question is possible, does this plugin do it automatically, or should I each user&#039;s IP address? How to find users&#039; IP addresses?

Thanks a lot and I&#039;m really hoping for your answer.... I tried restrict ip login but it does not give me what I need... Hope this plugin does..

Thanks a lot,
Raden</description>
		<content:encoded><![CDATA[<p>Dear Admin,</p>
<p>This is seems to be a nice plugin and I have the following questions.</p>
<p>1. I want to alllow every user to login only from their own IP address, Is this possible? This is to avoid sharing of  login details.</p>
<p>2. If the number 1 question is possible, does this plugin do it automatically, or should I each user&#8217;s IP address? How to find users&#8217; IP addresses?</p>
<p>Thanks a lot and I&#8217;m really hoping for your answer&#8230;. I tried restrict ip login but it does not give me what I need&#8230; Hope this plugin does..</p>
<p>Thanks a lot,<br />
Raden</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Charles Hodgson</title>
		<link>http://www.cmurrayconsulting.com/software/wordpress-restricted-site-access/#comment-3664</link>
		<dc:creator>Charles Hodgson</dc:creator>
		<pubDate>Wed, 24 Feb 2010 15:59:40 +0000</pubDate>
		<guid isPermaLink="false">http://www.cmurrayconsulting.com/?page_id=699#comment-3664</guid>
		<description>Not to unjustifiably promote getting attention sooner, but I too am looking for the feature Jeff Miller suggests. Can&#039;t fork myself and unlikely to fork-over for feature sponsorship. But I do like the plugin and will do a donation.</description>
		<content:encoded><![CDATA[<p>Not to unjustifiably promote getting attention sooner, but I too am looking for the feature Jeff Miller suggests. Can&#8217;t fork myself and unlikely to fork-over for feature sponsorship. But I do like the plugin and will do a donation.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jake Goldman</title>
		<link>http://www.cmurrayconsulting.com/software/wordpress-restricted-site-access/#comment-3606</link>
		<dc:creator>Jake Goldman</dc:creator>
		<pubDate>Sun, 21 Feb 2010 22:34:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.cmurrayconsulting.com/?page_id=699#comment-3606</guid>
		<description>Jeff - great question.

Unfortunately, due to the way WordPress handles files, files are only hidden by obscurity. If someone has a direct link to an upload, theyll be able to retrieve, it regardless of whether theyre logged in / unblocked.

The only way around this would be to use htaccess level protection on that folder. I would have to modify the plugin to block direct access to files in that, and stream them through a PHP script for download. 

Of course, this could be trickier than first blush might suggest. For instance, what about images embedded on a page? Streaming those in (instead of a plain old image src reference) would be confusing and complicated to implement. Perhaps there would be a checkbox for media items called secured file that would control which files can are blocked / have to be streamed. Of course, then they would also have to live in a seperate folder.

Ill investigate further, but theres no quick fix for this that I know of. If someone would like to fork the code to do this or sponsor the feature, it could get attention sooner!</description>
		<content:encoded><![CDATA[<p>Jeff &#8211; great question.</p>
<p>Unfortunately, due to the way WordPress handles files, files are only hidden by obscurity. If someone has a direct link to an upload, theyll be able to retrieve, it regardless of whether theyre logged in / unblocked.</p>
<p>The only way around this would be to use htaccess level protection on that folder. I would have to modify the plugin to block direct access to files in that, and stream them through a PHP script for download. </p>
<p>Of course, this could be trickier than first blush might suggest. For instance, what about images embedded on a page? Streaming those in (instead of a plain old image src reference) would be confusing and complicated to implement. Perhaps there would be a checkbox for media items called secured file that would control which files can are blocked / have to be streamed. Of course, then they would also have to live in a seperate folder.</p>
<p>Ill investigate further, but theres no quick fix for this that I know of. If someone would like to fork the code to do this or sponsor the feature, it could get attention sooner!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jeff Miller</title>
		<link>http://www.cmurrayconsulting.com/software/wordpress-restricted-site-access/#comment-3534</link>
		<dc:creator>Jeff Miller</dc:creator>
		<pubDate>Tue, 16 Feb 2010 03:29:24 +0000</pubDate>
		<guid isPermaLink="false">http://www.cmurrayconsulting.com/?page_id=699#comment-3534</guid>
		<description>Hi, I was wondering, does this plugin also restrict the ability for users to retrieve files that might be uploaded to a site?  Im working on a site for a non-profit and we want to have Board documents available to those who log in, but no one else.  We would give each board member a login; when their term is up, we terminate the login.

In short, no access to anything on the site, unless you have a login?

Thanks,

Jeff Miller</description>
		<content:encoded><![CDATA[<p>Hi, I was wondering, does this plugin also restrict the ability for users to retrieve files that might be uploaded to a site?  Im working on a site for a non-profit and we want to have Board documents available to those who log in, but no one else.  We would give each board member a login; when their term is up, we terminate the login.</p>
<p>In short, no access to anything on the site, unless you have a login?</p>
<p>Thanks,</p>
<p>Jeff Miller</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jake Goldman</title>
		<link>http://www.cmurrayconsulting.com/software/wordpress-restricted-site-access/#comment-3449</link>
		<dc:creator>Jake Goldman</dc:creator>
		<pubDate>Thu, 11 Feb 2010 01:57:22 +0000</pubDate>
		<guid isPermaLink="false">http://www.cmurrayconsulting.com/?page_id=699#comment-3449</guid>
		<description>Yikes - good catch. We&#039;ll patch that up tonight!</description>
		<content:encoded><![CDATA[<p>Yikes &#8211; good catch. We&#8217;ll patch that up tonight!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: John Thiele</title>
		<link>http://www.cmurrayconsulting.com/software/wordpress-restricted-site-access/#comment-3443</link>
		<dc:creator>John Thiele</dc:creator>
		<pubDate>Wed, 10 Feb 2010 12:58:11 +0000</pubDate>
		<guid isPermaLink="false">http://www.cmurrayconsulting.com/?page_id=699#comment-3443</guid>
		<description>I really appreciate your secure access plugin.  However, we have found a hack that bypasses it.  if you execute a search query string, such as /?s=news, the search is executed and the search results page is rendered.  Any way to close that hole?  I have disabled search until we launch, but it was a really bad surprise to find when we got hacked.

Thanks for the plugin and your consideration.</description>
		<content:encoded><![CDATA[<p>I really appreciate your secure access plugin.  However, we have found a hack that bypasses it.  if you execute a search query string, such as /?s=news, the search is executed and the search results page is rendered.  Any way to close that hole?  I have disabled search until we launch, but it was a really bad surprise to find when we got hacked.</p>
<p>Thanks for the plugin and your consideration.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jake Goldman</title>
		<link>http://www.cmurrayconsulting.com/software/wordpress-restricted-site-access/#comment-3414</link>
		<dc:creator>Jake Goldman</dc:creator>
		<pubDate>Tue, 09 Feb 2010 02:05:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.cmurrayconsulting.com/?page_id=699#comment-3414</guid>
		<description>Amy - if you want to modify the source code of the plug-in, you could certainly hardcode the IP ranges in instead of pulling the option from the setting panel.

If you&#039;d like help, we could do this for you with just an hour&#039;s budget. Use the &quot;Request a Quote&quot; button up top!</description>
		<content:encoded><![CDATA[<p>Amy &#8211; if you want to modify the source code of the plug-in, you could certainly hardcode the IP ranges in instead of pulling the option from the setting panel.</p>
<p>If you&#8217;d like help, we could do this for you with just an hour&#8217;s budget. Use the &#8220;Request a Quote&#8221; button up top!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Amy Greene</title>
		<link>http://www.cmurrayconsulting.com/software/wordpress-restricted-site-access/#comment-3384</link>
		<dc:creator>Amy Greene</dc:creator>
		<pubDate>Fri, 05 Feb 2010 22:01:18 +0000</pubDate>
		<guid isPermaLink="false">http://www.cmurrayconsulting.com/?page_id=699#comment-3384</guid>
		<description>We have an educational WordPressMU install where we&#039;d like to use plugin manager to activate this plugin by default upon creation. Is there a way to hardcode the settings and IP range for this plugin so all new blogs get the same settings to start? Blog owners could then go and change the settings later if they wanted to. Thanks for your great work on this plugin!</description>
		<content:encoded><![CDATA[<p>We have an educational WordPressMU install where we&#8217;d like to use plugin manager to activate this plugin by default upon creation. Is there a way to hardcode the settings and IP range for this plugin so all new blogs get the same settings to start? Blog owners could then go and change the settings later if they wanted to. Thanks for your great work on this plugin!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Why You Should Use WordPress &#124; 5280 Web Design</title>
		<link>http://www.cmurrayconsulting.com/software/wordpress-restricted-site-access/#comment-3294</link>
		<dc:creator>Why You Should Use WordPress &#124; 5280 Web Design</dc:creator>
		<pubDate>Thu, 28 Jan 2010 22:31:38 +0000</pubDate>
		<guid isPermaLink="false">http://www.cmurrayconsulting.com/?page_id=699#comment-3294</guid>
		<description>[...] a plugin that restricts anyone from logging into my site with an IP address different than my own (Restricted Site Access). Another popular plugin that allows for added security is WP Security Scan, which will actually [...]</description>
		<content:encoded><![CDATA[<p>[...] a plugin that restricts anyone from logging into my site with an IP address different than my own (Restricted Site Access). Another popular plugin that allows for added security is WP Security Scan, which will actually [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jake Goldman</title>
		<link>http://www.cmurrayconsulting.com/software/wordpress-restricted-site-access/#comment-2185</link>
		<dc:creator>Jake Goldman</dc:creator>
		<pubDate>Fri, 13 Nov 2009 02:28:48 +0000</pubDate>
		<guid isPermaLink="false">http://www.cmurrayconsulting.com/?page_id=699#comment-2185</guid>
		<description>Oliver - we&#039;re pretty swamped right now, so plug-ins aren&#039;t on the front burner. But if you can provide the PHP code that interprets something like &quot;192.168.1.0/24&quot; (or any other ranges a user could enter) into a starting and ending IP address, it would help us get that feature in more quickly.</description>
		<content:encoded><![CDATA[<p>Oliver &#8211; we&#8217;re pretty swamped right now, so plug-ins aren&#8217;t on the front burner. But if you can provide the PHP code that interprets something like &#8220;192.168.1.0/24&#8243; (or any other ranges a user could enter) into a starting and ending IP address, it would help us get that feature in more quickly.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
