Restrict Limesurvey Admin portal access

More
2 months 1 week ago #170994 by solte98
solte98 created the topic: Restrict Limesurvey Admin portal access
Hi,


Is it possible to restrict the limesurvey admin area by IP address?


we have apache/nginx sousing htaccess file?

Please Log in or Create an account to join the conversation.

More
2 months 1 week ago - 2 months 1 week ago #171041 by t420ss
t420ss replied the topic: Restrict Limesurvey Admin portal access
Here is one idea you could try.

What I have done for my phpmyadmin to restrict access:
In /etc/httpd/conf.d/phpMyAdmin.conf file:

<Directory /usr/share/phpMyAdmin/>
   AddDefaultCharset UTF-8
 
   <IfModule mod_authz_core.c>
     # Apache 2.4
     Require local
   </IfModule>
   <IfModule !mod_authz_core.c>
     # Apache 2.2
     Order Deny,Allow
     Deny from All
     Allow from 127.0.0.1 192.168.1.101
 
     Allow from ::1
   </IfModule>
</Directory>

Now, phpmyadmin is available from only the server itself (127.0.0.1) and that specific IP (192.168.1.101).


Could you try in a similar way, for example, somewhere in apache's httpd.conf (or some equivalent file ?):

<Directory "/var/www/html/your_limesurvey_root_dir/index.php/admin">
....
....
</Directory>

Let us know how it goes.
Last Edit: 2 months 1 week ago by t420ss.

Please Log in or Create an account to join the conversation.

More
2 months 1 week ago #171056 by DenisChenu
DenisChenu replied the topic: Restrict Limesurvey Admin portal access
I think best is to create a new plugin :
manual.limesurvey.org/Authentication_plu...elopment#beforeLogin

Since it's don't need to be default to happen : you can redirect or send a 403 here

Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand (or search sondages pro).
An error happen ? Before make a new topic : remind the Debug mode .

Please Log in or Create an account to join the conversation.

More
2 months 3 days ago #171544 by solte98
solte98 replied the topic: Restrict Limesurvey Admin portal access
Hi there,

thanks for putting me on the right path. Under the admin folder I can create a .htaccess file and restrict.

Works fine when someone tries to access limesurvey_root_dir/admin. However, does not work when they use limesurvey_root_dir/index.php/admin

Please Log in or Create an account to join the conversation.

More
2 months 2 days ago #171552 by DenisChenu
DenisChenu replied the topic: Restrict Limesurvey Admin portal access

DenisChenu wrote: I think best is to create a new plugin :
manual.limesurvey.org/Authentication_plu...elopment#beforeLogin


Assistance on LimeSurvey forum and LimeSurvey core development are on my free time.
I'm not a LimeSurvey GmbH member, professional service on demand (or search sondages pro).
An error happen ? Before make a new topic : remind the Debug mode .

Please Log in or Create an account to join the conversation.

Start now!

Just create your account and start using Limesurvey today.

Register now
Join our Newsletter!