Question

I want to validate an IP address before I login in my Admin Controller.

before_filter :validate_ip

How should I create this IP validation? I just want to write the IP addresses that have access in the controller.

Answer 1

The first solution is dynamic, because you can populate the array in runtime:

 def validate_ip
   valid = %w[127.0.0.1 10.0.0.1]
   redirect_to(login_path) unless valid.include?(request.remote_ip)
 end

---

The other way to restrict IPs is, to use constraints in your routes.rb:

get '/admin' => 'admin#super_secure_action', :constraints => { :ip => %w[127.0.0.1 10.0.0.1] }

# or

constraints(:ip => %w[127.0.0.1 10.0.0.1]) do
  # Every route defined in here will be restricted.
  get '/admin' => 'admin#super_secure_action'
end

For more information about Rails and Routes, be sure to check out: Rails Dispatch – The Powerful New Rails Router.