OzSteve

We have a subset of data that is restricted to users of our system that are not in Australia. So the code below is designed to check whether the request is coming from our internal ranges (1 & 2) or our Australian VPN Range and, if not, restrict access to that data and send an email to 2 people highlighting the "illegal" access attempt. What I need to do is alter this code to, once it has verified location, to also verify that the person is a member of AD Security group "ALLOWED". If you have any idea, please feel free to share. I don't want it completely re-written and I accept that it's may not be an ideal solution (I didn't write the code), but I need a quick idea, Any help would be awesome. function check_australian_access($hide) { global $user_details; require_once '/var/www/common/emailer.php'; if ($hide && ! is_australian_server()) { print "<b>This information is restricted to users of COMPANY, located within the Australian network.<br> <br> This access attempt has been logged.</b><br> <br> IP Address: $_SERVER[REMOTE_ADDR]<br> Username: $user_details->username"; email_from_to('SYETEM <fromaddress@company.com>', 'toaddress1@company.com,toaddress2@company.com', "Illegal Access Attempt - $_SERVER[REMOTE_ADDR] - $user_details->username", "An unauthorized user has attempted to access restricted information.\n\nURL: $_SERVER[REQUEST_URI]\n\n" . print_r($_SESSION, true) . "\n\n$_SERVER[HTTP_USER_AGENT]"); exit(); } } //------------------------------------------------------------------------------------------------- function hide_australian_restricted_information($hide, $string) { return $hide && ! is_australian_server() ? '*** RESTRICTED ***' : $string; } //------------------------------------------------------------------------------------------------- function skip_australian_restricted_information($hide) { return $hide && ! is_australian_server() ? true : false; } //------------------------------------------------------------------------------------------------- function is_australian_server() { // Discrete allowed ranges if(strpos($_SERVER['REMOTE_ADDR'], 'internal.range.1') !== false) return true; if(strpos($_SERVER['REMOTE_ADDR'], 'internal.range.2') !== false) return true; if(strpos($_SERVER['REMOTE_ADDR'], 'vpn.range.1') !== false) return true; return false; } ?>