IP ban using Express

Coding Help
1

Hey, I would like to know how to ip ban someone and know who I banned

so I tried the code below to get the visitors ip:
const express = require("express");
const app = express();
app.get("/", (req, res) => {
const IP = req.headers["x-forwarded-for"].split(",")[0];
console.log(IP); // logs the ip in server console
res.send(IP); //sends the IP back to the client
});

app.listen(3000);

once I get the ip of the user how do I know who’s is it?

and even if I get the ip adress how do I IP ban Without PHP

2

If you want to “find out” who the user is, you can always block the unwanted IP after collecting it from something such as a form. As for an IP in express, you might want to look to other users as node.js isn’t my expertise. :slight_smile:

3 
var array = [ip, ip]
app.get('/', (req, res) => {
//that other code
array.forEach(function(item, index){
if(IP == item) return res.redirect('/blocked') 
})
})

That should work - not tested. Send any errors and will fix tomorrow

1 Like
4

A better title would be “IP Ban with express” instead of “IP Ban without PHP” because it makes it sound like you think PHP is the official solution for IP bans.

1 Like
5

@javaarchive you’re a Regular, you can change it. :stuck_out_tongue:

6

@EddiesTech just making your code better

var banned = [ip, ip];
// the list of IPs you wanna ban

app.get("/", (req, res) => {
   banned.forEach(ip => {
     if (IP === ip) {
         res.sendStatus(401).send("You have been IP banned!");
         // 401 status code means unauthorised 
     } else {
        // they are not banned
        // send index.html file
     } 
  });
});

Redirects aren’t wise when you are doing stuff such as IP banning as they can cause problems (for example sending a GET requests from a banned IP with no redirects).

1 Like
7

There’s no way to actually figure out who is behind the IP so there goes that idea.
Next, VPN’s are a thing, this isn’t gonna work very well if I’m gonna be honest.

1 Like
8

What do you mean by that? The request parameter offers a lot of data including the host origin domain (or URL) from where the request was made which can be used and the IP can be obtained with

const IP = req.headers["x-forwarded-for"].split(",")[0];
9

What @Anish means is that you can’t find out who owns a specific IP which was what @idodev asked

3 Likes
10

Unless someone connects to an account using that IP

2 Likes
11

Or contacts the staff with that IP.

12

Then the issue would be that the IP is probably a Dynamic IP from their ISP. It usually isn’t a static IP they connect from. Next their is VPNs & Proxies to handle as @Anish mentioned. Although in the works is something that will make your IP static/dynamic at will. (useful for lots of things)

2 Likes
13

You also have to deal with IPv6 stuff. Just letting you know. I think I may know how to handle the stuff I mentioned in this post and above post of mine

14

Ooh, IPv6 drives me crazy.

2 Likes
15

IPv6 is very cool, very.

1 Like
16

@idodev You may need to check a file (you create) to see if the user’s IP matches any IP in TXT file.

17

IPv4:
123.45.67

IPv6:
eiufhew:389rfh2bfgh1ewufrasd:pfasldflsadfasdf324sfigoaufyges:ofugaowuefuigwe

18

That is not a valid IPv4 address :joy:

That is not a valid IPv6 address :joy:

1 Like
19

Lol, It isn’t. It definitely isn’t at all. :rofl:

20

Really? Thats my IPv6 address!