PHP and htaccess question

As devnull said, it's much easier to write the htaccess file with PHP than to read it with PHP. But if you aren't changing the IP range very often, it may be easiest to just edit both files manually. To test a visitor against an IP range in PHP, you could do something like this: $start_ip = '10.92.1.4'; $end_ip = '10.92.29.4'; $visitor_ip = $_SERVER['REMOTE_ADDR']; $visitor_can_access = ( ( ip2long( $visitor_ip ) >= ip2long( $start_ip ) ) && ( ip2long( $visitor_ip ) <= ip2long( $end_ip ) ) ) ? true : false;

Hmm, yeah something in the back of my mind said the ips in a database would probably be the logical solution. Would it be possible to somehow check and see what the HTTP response status codes for the visitor's IP address would be? Then display link if the code is 401?

Check out the "http://httpd.apache.org/docs/2.0/mod/core.html" directive. This way, if somebody who has access sends the url to somebody who doesn't (which means they'll never get to your preliminary php document), you can use the ErrorDocument to show a "buy it here" html page. After that, you can reuse that effect by simply linking to the document form your php script and depend on the ErrorDocument directive to do the right thing.

Check out the "ErrorDocument" directive. In particular, you'd want the 401 error (not 403... just sayin' because I mix them up sometimes). Yes, but you don't want to do that, you would have to write an htaccess file parser. I'm going to buck idea this a bit. Database setup, maintenance, and communication might well be as much overhead as writing a script to read info from htaccess files. Especially if (a) where what you need to read from the htaccess file is a well-defined and small subset of all possible directives (and I think allow/deny stuff qualifies) and (b) you're conversant with regular expressions. It sounds like you essentially need to search a given htaccess file to see if it has something like "Allow from " somewhere in it. You could http://us2.php.net/manual/en/function.file-get-contents.php, and use http://us2.php.net/preg_match (or even http://us2.php.net/manual/en/function.strpos.php if the file's set up a particular way) to search for the IP address and allow directive, and if you get a successful match, you show one thing, if not, another. There might be other reasons you'd want to migrate the info into a database, but I don't think simplifying this task is a particularly compelling one.

something like "Allow from " should've been "Allow from <user ip here>"

Thanks for the tips and ideas. We already use the ErrorDocument directive to redirect unauthorized users to a page with more information, but we also wanted to put a link on the first page that only non-subscribers would see. Also Safari will not redirect to a php page if it is done using ErrorDocument 401. Or maybe it does but I am doing something wrong, but it works fine in any other browser. That's another problem for another question. I have a feeling that I may actually migrate the info into a database because it would allow us to do some other things as well. But that is a whole other can of worms that I may have to shop out to real programmers.